Summary

Issues by type, trust, and severity

(Click on the bars or line points for details on the relevant issues.)

Severities of issues based on possible impact

(Click to see relevant Trusted issues.)

Elements with issues, by type

 

Trust evaluation (Trusted vs. Untrusted) of issues

(Click to see relevant issues.)

Trusted 14

Informational severity 14


Untrusted 11

Medium severity 11

A common practice when administering web applications is to create a copy/backup of a particular directory prior to making any modification. Another common practice is to add an extension or change the name of the original directory to signify that it is a backup (examples include .bak, .orig, .backup, etc.).

During the initial recon stages of an attack, cyber-criminals will attempt to locate backup directories by adding common extensions onto directories already discovered on the webserver. By analysing the response headers from the server they are able to determine if a backup directory exists. These backup directories can then assist in the compromise of the web application.

By utilising the same method, Arachni was able to discover a possible backup directory.

Vector type HTTP method Action
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20(another%20copy)/
server GET http://b3789e93786d.ngrok.io/login
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20(third%20copy)/
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20(4th%20copy)/
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20(3rd%20copy)/
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20(copy)/
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20-%20Copy/
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20-%20Copy%20Copy/
server GET http://b3789e93786d.ngrok.io/admin/permissions/11.cbz
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20-%20Copy%20(2)/
server GET http://b3789e93786d.ngrok.io/admin/permissions/11~/

(About the OWASP Top 10 list)

A6-Sensitive Data Exposure 11

Many web applications do not properly protect sensitive data, such as credit cards, tax IDs, and authentication credentials. Attackers may steal or modify such weakly protected data to conduct credit card fraud, identity theft, or other crimes. Sensitive data deserves extra protection such as encryption at rest or in transit, as well as special precautions when exchanged with the browser. OWASP

A common practice when administering web applications is to create a copy/backup of a particular directory prior to making any modification. Another common practice is to add an extension or change the name of the original directory to signify that it is a backup (examples include .bak, .orig, .backup, etc.).

During the initial recon stages of an attack, cyber-criminals will attempt to locate backup directories by adding common extensions onto directories already discovered on the webserver. By analysing the response headers from the server they are able to determine if a backup directory exists. These backup directories can then assist in the compromise of the web application.

By utilising the same method, Arachni was able to discover a possible backup directory.

Vector type HTTP method Action
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20(another%20copy)/
server GET http://b3789e93786d.ngrok.io/login
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20(third%20copy)/
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20(4th%20copy)/
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20(3rd%20copy)/
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20(copy)/
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20-%20Copy/
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20-%20Copy%20Copy/
server GET http://b3789e93786d.ngrok.io/admin/permissions/11.cbz
server GET http://b3789e93786d.ngrok.io/admin/permissions/11%20-%20Copy%20(2)/
server GET http://b3789e93786d.ngrok.io/admin/permissions/11~/

Configuration Download

Version
1.5.1
Seed
dc1fd3348d199f5e66655a1b9ebcc24e
Audit started on
2020-11-02 20:18:19 +0800
Audit finished on
2020-11-02 23:03:28 +0800
Runtime
02:45:08

General

URL
http://b3789e93786d.ngrok.io/
Checks
allowed_methods, backdoors, backup_directories, backup_files, csrf, htaccess_limit, html_objects, http_only_cookies, http_put, insecure_client_access_policy, insecure_cookies, insecure_cors_policy, insecure_cross_domain_policy_access, insecure_cross_domain_policy_headers, interesting_responses, path_traversal
Plugins
uniformity
{}
autothrottle
{}
autologin
{"url"=>"http://b3789e93786d.ngrok.io/", "check"=>"logout", "parameters"=>"email=admin@admin.com&password=password"}
healthmap
{}
timing_attacks
{}
discovery
{}

Audit

"parameter_values" true
"exclude_vector_patterns" []
"include_vector_patterns" []
"link_templates" []

Browser cluster

"local_storage" {}
"wait_for_elements" {}
"pool_size" 6
"job_timeout" 25
"worker_time_to_live" 100
"ignore_images" false
"screen_width" 1600
"screen_height" 1200

Datastore

"report_path" nil
"token" "f1247dfee641c1a7ed953f5770bfd144"

Http

"user_agent" "Arachni/v2.0dev"
"request_timeout" 10000
"request_redirect_limit" 5
"request_concurrency" 20
"request_queue_size" 100
"request_headers" {}
"response_max_size" 500000
"cookies" {}
"authentication_type" "auto"

Input

"values" {}
"default_values"
"(?i-mx:pass)" "5543!%arachni_secret"
"(?i-mx:name)" "arachni_name"
"(?i-mx:mail)" "arachni@email.gr"
"(?i-mx:amount)" "100"
"(?i-mx:usr)" "arachni_user"
"(?i-mx:id)" "1"
"(?i-mx:txt)" "arachni_text"
"(?i-mx:account)" "12"
"(?i-mx:user)" "arachni_user"
"(?i-mx:num)" "132"
"without_defaults" false
"force" false

Scope

"redundant_path_patterns" {}
"dom_depth_limit" 5
"exclude_file_extensions" []
"exclude_path_patterns" []
"exclude_content_patterns" []
"include_path_patterns" []
"restrict_paths" []
"extend_paths" []
"url_rewrites" {}

Session

"check_url" "http://b3789e93786d.ngrok.io/admin"
"check_pattern" "(?-mix:logout)"

Issues

At the time these issues were logged there were no abnormal interferences or anomalous server behavior.
These issues are considered trusted and accurate.

Interesting response 14 interesting_responses

The server responded with a non 200 (OK) nor 404 (Not Found) status code. This is a non-issue, however exotic HTTP response status codes can provide useful insights into the behavior of the web application and assist with the penetration test.

Proof
HTTP/1.1 302 Found
HTTP request

Raw HTTP request used to retrieve the page.

GET /index.php HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6IjFubTZvdWpkRkRRWE10RGNiam5qd1E9PSIsInZhbHVlIjoiYXNSdDNuVWQ1YldXYmt0YXIwS3hKNnZtblZncUkxQTVSVFdOSTFGWnFQZXpacG41NlI0NVhidjRaZWJzNUJic2EyOTd5d0RRaGMzaDlUTHVNM25pbUh2TUYrZ203ZjM4XC8zb1BmU1AwZWNrRUQxS2hUQkxLZWhUXC9mWHNBQ2h5UCIsIm1hYyI6IjY2ODFhY2E0YmQyN2E4MjczNDlkMGMwNTQ4ZTE5NDlkYjQ3NzliNWFhZjVkMTM1Nzk2NmJmMzJiNTUwODMyODgifQ%3D%3D;laravel_session=eyJpdiI6InpJcWM4ZkFNaU45b2xPQzRaWFwvYVpnPT0iLCJ2YWx1ZSI6ImVDckhzeU11UlFIXC85MDRkZUZRb2ttdldKcWF2UWVpOGRYdkVvalpXNHU0WXorSXFJMitrNWlmQmpmcnM4R2hZMlBROTFBdjMzSkxYUHZiZGFpdHl0NmZ4RUZFT29YTnRXbzNXU052a2NpR2Y1NGZSVFNnYWpoQkd2cnlWdEtwYiIsIm1hYyI6ImFkZWQ2OWMxMzcxMzkxN2ZjYjhmZjJkN2MwMGUzNTAxMWZhMzBmODJlNjhhMTVkMGE4YmRjMzM5MGU0MWQ5YzcifQ%3D%3D



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 14:33:04 GMT

Location: /login

Set-Cookie: XSRF-TOKEN=eyJpdiI6IlZnbmo4WkNLSzA2RVRTYnM1VWFmYlE9PSIsInZhbHVlIjoiXC9HZDJ0SXJ1N0syRDIwd1wvSnZza0NIMndKU0FiSmRPTXNmMjlnU2s3a3Q2MVlPWlNQRWVNY25CQ2RcL09SRDcxWUtJaVNLdzdjdHNkY0tBNElwT01PckFuUWxRYm83MW5NU2VhckZHWEE5bUNnd09qWnlMb01rTzJRMThzOGRtVEkiLCJtYWMiOiI5MzY3M2UzN2U4NmViN2JkN2IwOGI2MjcwNDZlY2Q4NjEwNGVhNzgwMmM4ZjQ3NzYwMjI1OTQ3ZmQwMTk3ZDIyIn0%3D; expires=Mon, 02-Nov-2020 16:33:04 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6IjNDZnh0MVNoMkRzdlF2XC8zekJwWllnPT0iLCJ2YWx1ZSI6IkxiZGtqaUpuK1BPRFl2YnZWc2E0RUlLQ1orY2Z6OEl2cUtFZGVoQmNDTytLd2Nxcm1abWRCYUlTd3h2bUFvQWdraGU5MU8yN3ZyWG0yWW40V1dVV1F5MVVNbW5sdEkyKzNxY21peEZxUWxSd0lZSzk2a3AwNTg2aHZXdGpQcllKIiwibWFjIjoiZDUzNWZlMjUyZmUwMGYzY2Q3NmJmYjQwNmJhNTEzMjA3OTMxNzNkM2ZlZTVhMmJiNjgyNDZiODI3MGMxNWYzYiJ9; expires=Mon, 02-Nov-2020 16:33:04 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>
HTTP request

Raw HTTP request used to retrieve the page.

GET / HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:50 GMT

Location: /login

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>
Proof
HTTP/1.1 302 Found
HTTP request

Raw HTTP request used to retrieve the page.

POST /admin/employees HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/employees/create

Origin: http://b3789e93786d.ngrok.io

Content-Type: multipart/form-data; boundary=----WebKitFormBoundarytLH6jR4BBOrUFBZv

Content-Length: 452

Cookie: XSRF-TOKEN=eyJpdiI6IlBoZzVyQ003ckpFbmJISjJFZ2k5NFE9PSIsInZhbHVlIjoibnVZRUpWT0NLQlN5eDdzQjNlSjhHS3VhNEtseDZVRnl2ZDh1cDBTWVc4YnM0TWtaSW1pcEYxdEg5WCtrUDJ0b0hXdHZJaUhpXC9weDV3c2Y3XC9vQmJBMStiSEhKZ3FSWTJBTytRS0twXC91VHRIVEhKVXB5dVdMVHZoRWlhdndaMlUiLCJtYWMiOiIxZjkyNmRiYTVjMzk1NWZmYzUyZGNjNGQ1ZTdjZDA3MmFkMmE1ZmZkNTQ1NGFhNTZjYjE2ZGFiYTg4YWJjNDY5In0%3D;laravel_session=eyJpdiI6IlljNU1peXJGQ0xwQ2RtODgzMm5DTnc9PSIsInZhbHVlIjoiWWZBb014aFlNSVNZbzd2dzRFQ29JVU0zdmVTSUhoXC9JQUxiK29ZR2xvNXdwOGt0a29XNVgzcG81UjNkd3F3OTZOK0xKdHJDN2N0Z0tKZk1yVWJuY0lMMENoYUM2bHo3Zzg0d1d5cjF5SkVnNE1HbU5LUjJrM21QRmNlUzB0WXB4IiwibWFjIjoiYWIxY2NlYWVjNjgzNGNiYThjZDUyZTM1YmZiN2Y5ZGM5ZDhkZDE3ZTk3YWU4YTAzNzkxMjRiMTdiYTJiODUyYSJ9

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



------WebKitFormBoundarytLH6jR4BBOrUFBZv

Content-Disposition: form-data; name="_token"



YlDDpNKK2wjS7cq5nR4MQ02Gw2GoHY7zVRfLJMb0

------WebKitFormBoundarytLH6jR4BBOrUFBZv

Content-Disposition: form-data; name="name"





------WebKitFormBoundarytLH6jR4BBOrUFBZv

Content-Disposition: form-data; name="email"





------WebKitFormBoundarytLH6jR4BBOrUFBZv

Content-Disposition: form-data; name="phone"





------WebKitFormBoundarytLH6jR4BBOrUFBZv--

HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 13:33:44 GMT

Location: http://b3789e93786d.ngrok.io/admin/employees/create

Set-Cookie: XSRF-TOKEN=eyJpdiI6InRpSlhBOHh0VEFHSjRyaDRYXC9kXC9Hdz09IiwidmFsdWUiOiJGenhZVFwvOVFIdTVpTjJLZm9tdlBMZHRwRWdkanp0MzZkZTEyeEFoZHRwaHJIMWpDUEJRcFNjM0ZBM0tIczA0V2FxeFdsVmZwdGZUZlM0TnNZZU9XXC9hYmtBNTlvVkoyc0k2dWxTS0hLaVwvelBZQlhtWkpkd3JyNGxIZ04wem4wVSIsIm1hYyI6ImE1ZTQxNGI5ZGRhMzVkMzBjMjA5MTVjMTI3N2JlOGFjYjE3NzBkMWUyODRkZGZkN2UyNDU3YjZlODk5NDBkNTMifQ%3D%3D; expires=Mon, 02-Nov-2020 15:33:44 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6ImlSWFdsS1BBN2ZyQVRLRGVYTE1GTFE9PSIsInZhbHVlIjoiNlRJRWVWSnBcL1JuUjlmS3liS0dpUjc1RmlwU2l2Q1RPRGJWQ0hrNlpRdFgza1oyYkZpdGliS3craHZudGlidEtaRUZQOGZaZHlCZzZJYWVmWTE3QzhRajlmaWhhYnl4dlVyNDlXbDlCcUIwWTVqMlg1MkNXaXlVcHVZekdIU0s3IiwibWFjIjoiN2JkNzhmNDczNDM1NTRmY2Q5YjYyZTA1N2NkZTE3MGVjZTJkMTQxYzA3Y2M2MzM4MDc3ZDYxZTVhZDlkNzExYSJ9; expires=Mon, 02-Nov-2020 15:33:44 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io/admin/employees/create'" />

        <title>Redirecting to http://b3789e93786d.ngrok.io/admin/employees/create</title>
    </head>
    <body>
        Redirecting to <a href="http://b3789e93786d.ngrok.io/admin/employees/create">http://b3789e93786d.ngrok.io/admin/employees/create</a>.
    </body>
</html>
HTTP request

Raw HTTP request used to retrieve the page.

GET / HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:50 GMT

Location: /login

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>
Proof
HTTP/1.1 100 Continue
HTTP request

Raw HTTP request used to retrieve the page.

PUT /password/reset/Arachni-dc1fd3348d199f5e66655a1b9ebcc24e HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Ik1QSThTc2x0UnVyVWJxdTJHQm1GV3c9PSIsInZhbHVlIjoibUw4Qkw5ZUtCR0FMK3c5XC9IVU1tdjBYdnlsZkh4ZGdMOXdyaFdVTDFTbCtNYnZXeWtyWTNNdERndGE1S2VKSFFJcmViSm9tc3BNWGNoM2VtKytMdWZ3NzAzN0JyUFJ4NFJJVHVNbjAzVkZCdjVVbUNYU25hR3BDZkJIS09zOHZNIiwibWFjIjoiMzY3MzZmYWRlY2ZhOGIwZTVhYzE4MTBhZTZmYjY3NmMxZWFhMjNiMDAxODczYWUwZTg0MjJiY2E1YjI1Mzc0MyJ9;laravel_session=eyJpdiI6IkJVaDU1MTZRR0JyUng0Z1hydWs1Y0E9PSIsInZhbHVlIjoiUGlndUtzWXhoUzZYZEhjZ3E2MmNMdlwvMjVvMlJGTW1iSWxWazBFSzJTdzV1bDNPaDdTazdKRisrdlwvdDRVWE9IYk9LcXg5SE83VUNvdHRXUENxNm44ZkJQQ0xMcGhOWFNnaGZcL20ySlwvdXNUSUZkSDArS0hGMXZLaHQ0S3hDZ3N4IiwibWFjIjoiZjIzOTlhZmEyNGZhZjc5MjAyZjQ5MmMwYmE1MGI2MjZiNTVkMjBmNTNlY2I1ZjY0ODJiNDZhZGI2ZDFhYTEyZiJ9

Content-Length: 55

Expect: 100-continue



Created by Arachni. PUTdc1fd3348d199f5e66655a1b9ebcc24e
HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 100 Continue



HTTP/1.1 405 Method Not Allowed

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

allow: GET, HEAD

Cache-Control: no-cache, private

date: Mon, 02 Nov 2020 13:40:12 GMT



<!doctype html>
<html class="theme-light">
<!--
Symfony\Component\HttpKernel\Exception\MethodNotAllowedHttpException: The PUT method is not supported for this route. Supported methods: GET, HEAD. in file /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/RouteCollection.php on line 256

#0 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/RouteCollection.php(242): Illuminate\Routing\RouteCollection->methodNotAllowed()
#1 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/RouteCollection.php(176): Illuminate\Routing\RouteCollection->getRouteForMethods()
#2 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/Router.php(635): Illuminate\Routing\RouteCollection->match()
#3 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/Router.php(624): Illuminate\Routing\Router->findRoute()
#4 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/Router.php(613): Illuminate\Routing\Router->dispatchToRoute()
#5 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(170): Illuminate\Routing\Router->dispatch()
#6 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(130): Illuminate\Foundation\Http\Kernel->Illuminate\Foundation\Http\{closure}()
#7 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TransformsRequest.php(21): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#8 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\TransformsRequest->handle()
#9 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/CheckForMaintenanceMode.php(63): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#10 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode->handle()
#11 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/ValidatePostSize.php(27): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#12 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\ValidatePostSize->handle()
#13 /home/vagrant/ProjectLaravel/vendor/fideloper/proxy/src/TrustProxies.php(57): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#14 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Fideloper\Proxy\TrustProxies->handle()
#15 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TransformsRequest.php(21): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#16 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\TransformsRequest->handle()
#17 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(105): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#18 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(145): Illuminate\Pipeline\Pipeline->then()
#19 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(110): Illuminate\Foundation\Http\Kernel->sendRequestThroughRouter()
#20 /home/vagrant/ProjectLaravel/public/index.php(55): Illuminate\Foundation\Http\Kernel->handle()
#21 {main}
-->
<head>
    <!-- Hide dumps asap -->
    <style>
        pre.sf-dump {
            display: none !important;
        }
    </style>

    <meta charset="UTF-8">
    <meta name="viewport"
          content="width=device-width, initial-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="robots" content="noindex, nofollow">

    <title>🧨 The PUT method is not supported for this route. Supported methods: GET, HEAD.</title>

    
</head>
<body class="scrollbar-lg">

<script>
    window.data = {"report":{"notifier":"Laravel Client","language":"PHP","framework_version":"6.20.2","language_version":"7.4.11","exception_class":"Symfony\\Component\\HttpKernel\\Exception\\MethodNotAllowedHttpException","seen_at":1604324412,"message":"The PUT method is not supported for this route. Supported methods: GET, HEAD.","glows":[],"solutions":[],"stacktrace":[{"line_number":256,"method":"methodNotAllowed","class":"Illuminate\\Routing\\RouteCollection","code_snippet":{"241":"","242":"        $this-\u003EmethodNotAllowed($methods, $request-\u003Emethod());","243":"    }","244":"","245":"    \/**","246":"     * Throw a method not allowed HTTP exception.","247":"     *","248":"     * @param  array  $others","249":"     * @param  string  $method","250":"     * @return void","251":"     *","252":"     * @throws \\Symfony\\Component\\HttpKernel\\Exception\\MethodNotAllowedHttpException","253":"     *\/","254":"    protected function methodNotAllowed(array $others, $method)","255":"    {","256":"        throw new MethodNotAllowedHttpException(","257":"            $others,","258":"            sprintf(","259":"                \u0027The %s method is not supported for this route. Supported methods: %s.\u0027,","260":"                $method,","261":"                implode(\u0027, \u0027, $others)","262":"            )","263":"        );","264":"    }","265":"","266":"    \/**","267":"     * Get routes from the collection by method.","268":"     *","269":"     * @param  string|null  $method","270":"     * @return array","271":"     *\/"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Routing\/RouteCollection.php","is_application_frame":false},{"line_number":242,"method":"getRouteForMethods","class":"Illuminate\\Routing\\RouteCollection","code_snippet":{"227":"     *","228":"     * @param  \\Illuminate\\Http\\Request  $request","229":"     * @param  array  $methods","230":"     * @return \\Illuminate\\Routing\\Route","231":"     *","232":"     * @throws \\Symfony\\Component\\HttpKernel\\Exception\\MethodNotAllowedHttpException","233":"     *\/","234":"    protected function getRouteForMethods($request, array $methods)","235":"    {","236":"        if ($request-\u003Emethod() === \u0027OPTIONS\u0027) {","237":"            return (new Route(\u0027OPTIONS\u0027, $request-\u003Epath(), function () use ($methods) {","238":"                return new Response(\u0027\u0027, 200, [\u0027Allow\u0027 =\u003E implode(\u0027,\u0027, $methods)]);","239":"            }))-\u003Ebind($request);","240":"        }","241":"","242":"        $this-\u003EmethodNotAllowed($methods, $request-\u003Emethod());","243":"    }","244":"","245":"    \/**","246":"     * Throw a method not allowed HTTP exception.","247":"     *","248":"     * @param  array  $others","249":"     * @param  string  $method","250":"     * @return void","251":"     *","252":"     * @throws \\Symfony\\Component\\HttpKernel\\Exception\\MethodNotAllowedHttpException","253":"     *\/","254":"    protected function methodNotAllowed(array $others, $method)","255":"    {","256":"        throw new MethodNotAllowedHttpException(","257":"            $others,"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Routing\/RouteCollection.php","is_application_frame":false},{"line_number":176,"method":"match","class":"Illuminate\\Routing\\RouteCollection","code_snippet":{"161":"        \/\/ First, we will see if we can find a matching route for this current request","162":"        \/\/ method. If we can, great, we can just return it so that it can be called","163":"        \/\/ by the consumer. Otherwise we will check for routes with another verb.","164":"        $route = $this-\u003EmatchAgainstRoutes($routes, $request);","165":"","166":"        if (! is_null($route)) {","167":"            return $route-\u003Ebind($request);","168":"        }","169":"","170":"        \/\/ If no route was found we will now check if a matching route is specified by","171":"        \/\/ another HTTP verb. If it is we will need to throw a MethodNotAllowed and","172":"        \/\/ inform the user agent of which HTTP verb it should use for this route.","173":"        $others = $this-\u003EcheckForAlternateVerbs($request);","174":"","175":"        if (count($others) \u003E 0) {","176":"            return $this-\u003EgetRouteForMethods($request, $others);","177":"        }","178":"","179":"        throw new NotFoundHttpException;","180":"    }","181":"","182":"    \/**","183":"     * Determine if a route in the array matches the request.","184":"     *","185":"     * @param  array  $routes","186":"     * @param  \\Illuminate\\Http\\Request  $request","187":"     * @param  bool  $includingMethod","188":"     * @return \\Illuminate\\Routing\\Route|null","189":"     *\/","190":"    protected function matchAgainstRoutes(array $routes, $request, $includingMethod = true)","191":"    {"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Routing\/RouteCollection.php","is_application_frame":false},{"line_number":635,"method":"findRoute","class":"Illuminate\\Routing\\Router","code_snippet":{"620":"     * @return \\Symfony\\Component\\HttpFoundation\\Response","621":"     *\/","622":"    public function dispatchToRoute(Request $request)","623":"    {","624":"        return $this-\u003ErunRoute($request, $this-\u003EfindRoute($request));","625":"    }","626":"","627":"    \/**","628":"     * Find the route matching a given request.","629":"     *","630":"     * @param  \\Illuminate\\Http\\Request  $request","631":"     * @return \\Illuminate\\Routing\\Route","632":"     *\/","633":"    protected function findRoute($request)","634":"    {","635":"        $this-\u003Ecurrent = $route = $this-\u003Eroutes-\u003Ematch($request);","636":"","637":"        $this-\u003Econtainer-\u003Einstance(Route::class, $route);","638":"","639":"        return $route;","640":"    }","641":"","642":"    \/**","643":"     * Return the response for the given route.","644":"     *","645":"     * @param  \\Illuminate\\Http\\Request  $request","646":"     * @param  \\Illuminate\\Routing\\Route  $route","647":"     * @return \\Symfony\\Component\\HttpFoundation\\Response","648":"     *\/","649":"    protected function runRoute(Request $request, Route $route)","650":"    {"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Routing\/Router.php","is_application_frame":false},{"line_number":624,"method":"dispatchToRoute","class":"Illuminate\\Routing\\Router","code_snippet":{"609":"    public function dispatch(Request $request)","610":"    {","611":"        $this-\u003EcurrentRequest = $request;","612":"","613":"        return $this-\u003EdispatchToRoute($request);","614":"    }","615":"","616":"    \/**","617":"     * Dispatch the request to a route and return the response.","618":"     *","619":"     * @param  \\Illuminate\\Http\\Request  $request","620":"     * @return \\Symfony\\Component\\HttpFoundation\\Response","621":"     *\/","622":"    public function dispatchToRoute(Request $request)","623":"    {","624":"        return $this-\u003ErunRoute($request, $this-\u003EfindRoute($request));","625":"    }","626":"","627":"    \/**","628":"     * Find the route matching a given request.","629":"     *","630":"     * @param  \\Illuminate\\Http\\Request  $request","631":"     * @return \\Illuminate\\Routing\\Route","632":"     *\/","633":"    protected function findRoute($request)","634":"    {","635":"        $this-\u003Ecurrent = $route = $this-\u003Eroutes-\u003Ematch($request);","636":"","637":"        $this-\u003Econtainer-\u003Einstance(Route::class, $route);","638":"","639":"        return $route;"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Routing\/Router.php","is_application_frame":false},{"line_number":613,"method":"dispatch","class":"Illuminate\\Routing\\Router","code_snippet":{"598":"        $route = tap($this-\u003Eroutes-\u003EgetByName($name))-\u003Ebind($this-\u003EcurrentRequest);","599":"","600":"        return $this-\u003ErunRoute($this-\u003EcurrentRequest, $route);","601":"    }","602":"","603":"    \/**","604":"     * Dispatch the request to the application.","605":"     *","606":"     * @param  \\Illuminate\\Http\\Request  $request","607":"     * @return \\Symfony\\Component\\HttpFoundation\\Response","608":"     *\/","609":"    public function dispatch(Request $request)","610":"    {","611":"        $this-\u003EcurrentRequest = $request;","612":"","613":"        return $this-\u003EdispatchToRoute($request);","614":"    }","615":"","616":"    \/**","617":"     * Dispatch the request to a route and return the response.","618":"     *","619":"     * @param  \\Illuminate\\Http\\Request  $request","620":"     * @return \\Symfony\\Component\\HttpFoundation\\Response","621":"     *\/","622":"    public function dispatchToRoute(Request $request)","623":"    {","624":"        return $this-\u003ErunRoute($request, $this-\u003EfindRoute($request));","625":"    }","626":"","627":"    \/**","628":"     * Find the route matching a given request."},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Routing\/Router.php","is_application_frame":false},{"line_number":170,"method":"Illuminate\\Foundation\\Http\\{closure}","class":"Illuminate\\Foundation\\Http\\Kernel","code_snippet":{"155":"        if (! $this-\u003Eapp-\u003EhasBeenBootstrapped()) {","156":"            $this-\u003Eapp-\u003EbootstrapWith($this-\u003Ebootstrappers());","157":"        }","158":"    }","159":"","160":"    \/**","161":"     * Get the route dispatcher callback.","162":"     *","163":"     * @return \\Closure","164":"     *\/","165":"    protected function dispatchToRouter()","166":"    {","167":"        return function ($request) {","168":"            $this-\u003Eapp-\u003Einstance(\u0027request\u0027, $request);","169":"","170":"            return $this-\u003Erouter-\u003Edispatch($request);","171":"        };","172":"    }","173":"","174":"    \/**","175":"     * Call the terminate method on any terminable middleware.","176":"     *","177":"     * @param  \\Illuminate\\Http\\Request  $request","178":"     * @param  \\Illuminate\\Http\\Response  $response","179":"     * @return void","180":"     *\/","181":"    public function terminate($request, $response)","182":"    {","183":"        $this-\u003EterminateMiddleware($request, $response);","184":"","185":"        $this-\u003Eapp-\u003Eterminate();"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Foundation\/Http\/Kernel.php","is_application_frame":false},{"line_number":130,"method":"Illuminate\\Pipeline\\{closure}","class":"Illuminate\\Pipeline\\Pipeline","code_snippet":{"115":"        return $this-\u003Ethen(function ($passable) {","116":"            return $passable;","117":"        });","118":"    }","119":"","120":"    \/**","121":"     * Get the final piece of the Closure onion.","122":"     *","123":"     * @param  \\Closure  $destination","124":"     * @return \\Closure","125":"     *\/","126":"    protected function prepareDestination(Closure $destination)","127":"    {","128":"        return function ($passable) use ($destination) {","129":"            try {","130":"                return $destination($passable);","131":"            } catch (Exception $e) {","132":"                return $this-\u003EhandleException($passable, $e);","133":"            } catch (Throwable $e) {","134":"                return $this-\u003EhandleException($passable, new FatalThrowableError($e));","135":"            }","136":"        };","137":"    }","138":"","139":"    \/**","140":"     * Get a Closure that represents a slice of the application onion.","141":"     *","142":"     * @return \\Closure","143":"     *\/","144":"    protected function carry()","145":"    {"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Pipeline\/Pipeline.php","is_application_frame":false},{"line_number":21,"method":"handle","class":"Illuminate\\Foundation\\Http\\Middleware\\TransformsRequest","code_snippet":{"6":"use Symfony\\Component\\HttpFoundation\\ParameterBag;","7":"","8":"class TransformsRequest","9":"{","10":"    \/**","11":"     * Handle an incoming request.","12":"     *","13":"     * @param  \\Illuminate\\Http\\Request  $request","14":"     * @param  \\Closure  $next","15":"     * @return mixed","16":"     *\/","17":"    public function handle($request, Closure $next)","18":"    {","19":"        $this-\u003Eclean($request);","20":"","21":"        return $next($request);","22":"    }","23":"","24":"    \/**","25":"     * Clean the request\u0027s data.","26":"     *","27":"     * @param  \\Illuminate\\Http\\Request  $request","28":"     * @return void","29":"     *\/","30":"    protected function clean($request)","31":"    {","32":"        $this-\u003EcleanParameterBag($request-\u003Equery);","33":"","34":"        if ($request-\u003EisJson()) {","35":"            $this-\u003EcleanParameterBag($request-\u003Ejson());","36":"        } elseif ($request-\u003Erequest !== $request-\u003Equery) {"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Foundation\/Http\/Middleware\/TransformsRequest.php","is_application_frame":false},{"line_number":171,"method":"Illuminate\\Pipeline\\{closure}","class":"Illuminate\\Pipeline\\Pipeline","code_snippet":{"156":"","157":"                        \/\/ If the pipe is a string we will parse the string and resolve the class out","158":"                        \/\/ of the dependency injection container. We can then build a callable and","159":"                        \/\/ execute the pipe function giving in the parameters that are required.","160":"                        $pipe = $this-\u003EgetContainer()-\u003Emake($name);","161":"","162":"                        $parameters = array_merge([$passable, $stack], $parameters);","163":"                    } else {","164":"                        \/\/ If the pipe is already an object we\u0027ll just make a callable and pass it to","165":"                        \/\/ the pipe as-is. There is no need to do any extra parsing and formatting","166":"                        \/\/ since the object we\u0027re given was already a fully instantiated object.","167":"                        $parameters = [$passable, $stack];","168":"                    }","169":"","170":"                    $carry = method_exists($pipe, $this-\u003Emethod)","171":"                                    ? $pipe-\u003E{$this-\u003Emethod}(...$parameters)","172":"                                    : $pipe(...$parameters);","173":"","174":"                    return $this-\u003EhandleCarry($carry);","175":"                } catch (Exception $e) {","176":"                    return $this-\u003EhandleException($passable, $e);","177":"                } catch (Throwable $e) {","178":"                    return $this-\u003EhandleException($passable, new FatalThrowableError($e));","179":"                }","180":"            };","181":"        };","182":"    }","183":"","184":"    \/**","185":"     * Parse full pipe string to get name and parameters.","186":"     *"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Pipeline\/Pipeline.php","is_application_frame":false},{"line_number":63,"method":"handle","class":"Illuminate\\Foundation\\Http\\Middleware\\CheckForMaintenanceMode","code_snippet":{"48":"    {","49":"        if ($this-\u003Eapp-\u003EisDownForMaintenance()) {","50":"            $data = json_decode(file_get_contents($this-\u003Eapp-\u003EstoragePath().\u0027\/framework\/down\u0027), true);","51":"","52":"            if (isset($data[\u0027allowed\u0027]) \u0026\u0026 IpUtils::checkIp($request-\u003Eip(), (array) $data[\u0027allowed\u0027])) {","53":"                return $next($request);","54":"            }","55":"","56":"            if ($this-\u003EinExceptArray($request)) {","57":"                return $next($request);","58":"            }","59":"","60":"            throw new MaintenanceModeException($data[\u0027time\u0027], $data[\u0027retry\u0027], $data[\u0027message\u0027]);","61":"        }","62":"","63":"        return $next($request);","64":"    }","65":"","66":"    \/**","67":"     * Determine if the request has a URI that should be accessible in maintenance mode.","68":"     *","69":"     * @param  \\Illuminate\\Http\\Request  $request","70":"     * @return bool","71":"     *\/","72":"    protected function inExceptArray($request)","73":"    {","74":"        foreach ($this-\u003Eexcept as $except) {","75":"            if ($except !== \u0027\/\u0027) {","76":"                $except = trim($except, \u0027\/\u0027);","77":"            }","78":""},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Foundation\/Http\/Middleware\/CheckForMaintenanceMode.php","is_application_frame":false},{"line_number":171,"method":"Illuminate\\Pipeline\\{closure}","class":"Illuminate\\Pipeline\\Pipeline","code_snippet":{"156":"","157":"                        \/\/ If the pipe is a string we will parse the string and resolve the class out","158":"                        \/\/ of the dependency injection container. We can then build a callable and","159":"                        \/\/ execute the pipe function giving in the parameters that are required.","160":"                        $pipe = $this-\u003EgetContainer()-\u003Emake($name);","161":"","162":"                        $parameters = array_merge([$passable, $stack], $parameters);","163":"                    } else {","164":"                        \/\/ If the pipe is already an object we\u0027ll just make a callable and pass it to","165":"                        \/\/ the pipe as-is. There is no need to do any extra parsing and formatting","166":"                        \/\/ since the object we\u0027re given was already a fully instantiated object.","167":"                        $parameters = [$passable, $stack];","168":"                    }","169":"","170":"                    $carry = method_exists($pipe, $this-\u003Emethod)","171":"                                    ? $pipe-\u003E{$this-\u003Emethod}(...$parameters)","172":"                                    : $pipe(...$parameters);","173":"","174":"                    return $this-\u003EhandleCarry($carry);","175":"                } catch (Exception $e) {","176":"                    return $this-\u003EhandleException($passable, $e);","177":"                } catch (Throwable $e) {","178":"                    return $this-\u003EhandleException($passable, new FatalThrowableError($e));","179":"                }","180":"            };","181":"        };","182":"    }","183":"","184":"    \/**","185":"     * Parse full pipe string to get name and parameters.","186":"     *"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Pipeline\/Pipeline.php","is_application_frame":false},{"line_number":27,"method":"handle","class":"Illuminate\\Foundation\\Http\\Middleware\\ValidatePostSize","code_snippet":{"12":"     *","13":"     * @param  \\Illuminate\\Http\\Request  $request","14":"     * @param  \\Closure  $next","15":"     * @return mixed","16":"     *","17":"     * @throws \\Illuminate\\Http\\Exceptions\\PostTooLargeException","18":"     *\/","19":"    public function handle($request, Closure $next)","20":"    {","21":"        $max = $this-\u003EgetPostMaxSize();","22":"","23":"        if ($max \u003E 0 \u0026\u0026 $request-\u003Eserver(\u0027CONTENT_LENGTH\u0027) \u003E $max) {","24":"            throw new PostTooLargeException;","25":"        }","26":"","27":"        return $next($request);","28":"    }","29":"","30":"    \/**","31":"     * Determine the server \u0027post_max_size\u0027 as bytes.","32":"     *","33":"     * @return int","34":"     *\/","35":"    protected function getPostMaxSize()","36":"    {","37":"        if (is_numeric($postMaxSize = ini_get(\u0027post_max_size\u0027))) {","38":"            return (int) $postMaxSize;","39":"        }","40":"","41":"        $metric = strtoupper(substr($postMaxSize, -1));","42":"        $postMaxSize = (int) $postMaxSize;"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Foundation\/Http\/Middleware\/ValidatePostSize.php","is_application_frame":false},{"line_number":171,"method":"Illuminate\\Pipeline\\{closure}","class":"Illuminate\\Pipeline\\Pipeline","code_snippet":{"156":"","157":"                        \/\/ If the pipe is a string we will parse the string and resolve the class out","158":"                        \/\/ of the dependency injection container. We can then build a callable and","159":"                        \/\/ execute the pipe function giving in the parameters that are required.","160":"                        $pipe = $this-\u003EgetContainer()-\u003Emake($name);","161":"","162":"                        $parameters = array_merge([$passable, $stack], $parameters);","163":"                    } else {","164":"                        \/\/ If the pipe is already an object we\u0027ll just make a callable and pass it to","165":"                        \/\/ the pipe as-is. There is no need to do any extra parsing and formatting","166":"                        \/\/ since the object we\u0027re given was already a fully instantiated object.","167":"                        $parameters = [$passable, $stack];","168":"                    }","169":"","170":"                    $carry = method_exists($pipe, $this-\u003Emethod)","171":"                                    ? $pipe-\u003E{$this-\u003Emethod}(...$parameters)","172":"                                    : $pipe(...$parameters);","173":"","174":"                    return $this-\u003EhandleCarry($carry);","175":"                } catch (Exception $e) {","176":"                    return $this-\u003EhandleException($passable, $e);","177":"                } catch (Throwable $e) {","178":"                    return $this-\u003EhandleException($passable, new FatalThrowableError($e));","179":"                }","180":"            };","181":"        };","182":"    }","183":"","184":"    \/**","185":"     * Parse full pipe string to get name and parameters.","186":"     *"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Pipeline\/Pipeline.php","is_application_frame":false},{"line_number":57,"method":"handle","class":"Fideloper\\Proxy\\TrustProxies","code_snippet":{"42":"    \/**","43":"     * Handle an incoming request.","44":"     *","45":"     * @param \\Illuminate\\Http\\Request $request","46":"     * @param \\Closure                 $next","47":"     *","48":"     * @throws \\Symfony\\Component\\HttpKernel\\Exception\\HttpException","49":"     *","50":"     * @return mixed","51":"     *\/","52":"    public function handle(Request $request, Closure $next)","53":"    {","54":"        $request::setTrustedProxies([], $this-\u003EgetTrustedHeaderNames()); \/\/ Reset trusted proxies between requests","55":"        $this-\u003EsetTrustedProxyIpAddresses($request);","56":"","57":"        return $next($request);","58":"    }","59":"","60":"    \/**","61":"     * Sets the trusted proxies on the request to the value of trustedproxy.proxies","62":"     *","63":"     * @param \\Illuminate\\Http\\Request $request","64":"     *\/","65":"    protected function setTrustedProxyIpAddresses(Request $request)","66":"    {","67":"        $trustedIps = $this-\u003Eproxies ?: $this-\u003Econfig-\u003Eget(\u0027trustedproxy.proxies\u0027);","68":"","69":"        \/\/ Trust any IP address that calls us","70":"        \/\/ `**` for backwards compatibility, but is deprecated","71":"        if ($trustedIps === \u0027*\u0027 || $trustedIps === \u0027**\u0027) {","72":"            return $this-\u003EsetTrustedProxyIpAddressesToTheCallingIp($request);"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/fideloper\/proxy\/src\/TrustProxies.php","is_application_frame":false},{"line_number":171,"method":"Illuminate\\Pipeline\\{closure}","class":"Illuminate\\Pipeline\\Pipeline","code_snippet":{"156":"","157":"                        \/\/ If the pipe is a string we will parse the string and resolve the class out","158":"                        \/\/ of the dependency injection container. We can then build a callable and","159":"                        \/\/ execute the pipe function giving in the parameters that are required.","160":"                        $pipe = $this-\u003EgetContainer()-\u003Emake($name);","161":"","162":"                        $parameters = array_merge([$passable, $stack], $parameters);","163":"                    } else {","164":"                        \/\/ If the pipe is already an object we\u0027ll just make a callable and pass it to","165":"                        \/\/ the pipe as-is. There is no need to do any extra parsing and formatting","166":"                        \/\/ since the object we\u0027re given was already a fully instantiated object.","167":"                        $parameters = [$passable, $stack];","168":"                    }","169":"","170":"                    $carry = method_exists($pipe, $this-\u003Emethod)","171":"                                    ? $pipe-\u003E{$this-\u003Emethod}(...$parameters)","172":"                                    : $pipe(...$parameters);","173":"","174":"                    return $this-\u003EhandleCarry($carry);","175":"                } catch (Exception $e) {","176":"                    return $this-\u003EhandleException($passable, $e);","177":"                } catch (Throwable $e) {","178":"                    return $this-\u003EhandleException($passable, new FatalThrowableError($e));","179":"                }","180":"            };","181":"        };","182":"    }","183":"","184":"    \/**","185":"     * Parse full pipe string to get name and parameters.","186":"     *"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Pipeline\/Pipeline.php","is_application_frame":false},{"line_number":21,"method":"handle","class":"Illuminate\\Foundation\\Http\\Middleware\\TransformsRequest","code_snippet":{"6":"use Symfony\\Component\\HttpFoundation\\ParameterBag;","7":"","8":"class TransformsRequest","9":"{","10":"    \/**","11":"     * Handle an incoming request.","12":"     *","13":"     * @param  \\Illuminate\\Http\\Request  $request","14":"     * @param  \\Closure  $next","15":"     * @return mixed","16":"     *\/","17":"    public function handle($request, Closure $next)","18":"    {","19":"        $this-\u003Eclean($request);","20":"","21":"        return $next($request);","22":"    }","23":"","24":"    \/**","25":"     * Clean the request\u0027s data.","26":"     *","27":"     * @param  \\Illuminate\\Http\\Request  $request","28":"     * @return void","29":"     *\/","30":"    protected function clean($request)","31":"    {","32":"        $this-\u003EcleanParameterBag($request-\u003Equery);","33":"","34":"        if ($request-\u003EisJson()) {","35":"            $this-\u003EcleanParameterBag($request-\u003Ejson());","36":"        } elseif ($request-\u003Erequest !== $request-\u003Equery) {"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Foundation\/Http\/Middleware\/TransformsRequest.php","is_application_frame":false},{"line_number":171,"method":"Illuminate\\Pipeline\\{closure}","class":"Illuminate\\Pipeline\\Pipeline","code_snippet":{"156":"","157":"                        \/\/ If the pipe is a string we will parse the string and resolve the class out","158":"                        \/\/ of the dependency injection container. We can then build a callable and","159":"                        \/\/ execute the pipe function giving in the parameters that are required.","160":"                        $pipe = $this-\u003EgetContainer()-\u003Emake($name);","161":"","162":"                        $parameters = array_merge([$passable, $stack], $parameters);","163":"                    } else {","164":"                        \/\/ If the pipe is already an object we\u0027ll just make a callable and pass it to","165":"                        \/\/ the pipe as-is. There is no need to do any extra parsing and formatting","166":"                        \/\/ since the object we\u0027re given was already a fully instantiated object.","167":"                        $parameters = [$passable, $stack];","168":"                    }","169":"","170":"                    $carry = method_exists($pipe, $this-\u003Emethod)","171":"                                    ? $pipe-\u003E{$this-\u003Emethod}(...$parameters)","172":"                                    : $pipe(...$parameters);","173":"","174":"                    return $this-\u003EhandleCarry($carry);","175":"                } catch (Exception $e) {","176":"                    return $this-\u003EhandleException($passable, $e);","177":"                } catch (Throwable $e) {","178":"                    return $this-\u003EhandleException($passable, new FatalThrowableError($e));","179":"                }","180":"            };","181":"        };","182":"    }","183":"","184":"    \/**","185":"     * Parse full pipe string to get name and parameters.","186":"     *"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Pipeline\/Pipeline.php","is_application_frame":false},{"line_number":105,"method":"then","class":"Illuminate\\Pipeline\\Pipeline","code_snippet":{"90":"        return $this;","91":"    }","92":"","93":"    \/**","94":"     * Run the pipeline with a final destination callback.","95":"     *","96":"     * @param  \\Closure  $destination","97":"     * @return mixed","98":"     *\/","99":"    public function then(Closure $destination)","100":"    {","101":"        $pipeline = array_reduce(","102":"            array_reverse($this-\u003Epipes()), $this-\u003Ecarry(), $this-\u003EprepareDestination($destination)","103":"        );","104":"","105":"        return $pipeline($this-\u003Epassable);","106":"    }","107":"","108":"    \/**","109":"     * Run the pipeline and return the result.","110":"     *","111":"     * @return mixed","112":"     *\/","113":"    public function thenReturn()","114":"    {","115":"        return $this-\u003Ethen(function ($passable) {","116":"            return $passable;","117":"        });","118":"    }","119":"","120":"    \/**"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Pipeline\/Pipeline.php","is_application_frame":false},{"line_number":145,"method":"sendRequestThroughRouter","class":"Illuminate\\Foundation\\Http\\Kernel","code_snippet":{"130":"     *","131":"     * @param  \\Illuminate\\Http\\Request  $request","132":"     * @return \\Illuminate\\Http\\Response","133":"     *\/","134":"    protected function sendRequestThroughRouter($request)","135":"    {","136":"        $this-\u003Eapp-\u003Einstance(\u0027request\u0027, $request);","137":"","138":"        Facade::clearResolvedInstance(\u0027request\u0027);","139":"","140":"        $this-\u003Ebootstrap();","141":"","142":"        return (new Pipeline($this-\u003Eapp))","143":"                    -\u003Esend($request)","144":"                    -\u003Ethrough($this-\u003Eapp-\u003EshouldSkipMiddleware() ? [] : $this-\u003Emiddleware)","145":"                    -\u003Ethen($this-\u003EdispatchToRouter());","146":"    }","147":"","148":"    \/**","149":"     * Bootstrap the application for HTTP requests.","150":"     *","151":"     * @return void","152":"     *\/","153":"    public function bootstrap()","154":"    {","155":"        if (! $this-\u003Eapp-\u003EhasBeenBootstrapped()) {","156":"            $this-\u003Eapp-\u003EbootstrapWith($this-\u003Ebootstrappers());","157":"        }","158":"    }","159":"","160":"    \/**"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Foundation\/Http\/Kernel.php","is_application_frame":false},{"line_number":110,"method":"handle","class":"Illuminate\\Foundation\\Http\\Kernel","code_snippet":{"95":"","96":"        $this-\u003EsyncMiddlewareToRouter();","97":"    }","98":"","99":"    \/**","100":"     * Handle an incoming HTTP request.","101":"     *","102":"     * @param  \\Illuminate\\Http\\Request  $request","103":"     * @return \\Illuminate\\Http\\Response","104":"     *\/","105":"    public function handle($request)","106":"    {","107":"        try {","108":"            $request-\u003EenableHttpMethodParameterOverride();","109":"","110":"            $response = $this-\u003EsendRequestThroughRouter($request);","111":"        } catch (Exception $e) {","112":"            $this-\u003EreportException($e);","113":"","114":"            $response = $this-\u003ErenderException($request, $e);","115":"        } catch (Throwable $e) {","116":"            $this-\u003EreportException($e = new FatalThrowableError($e));","117":"","118":"            $response = $this-\u003ErenderException($request, $e);","119":"        }","120":"","121":"        $this-\u003Eapp[\u0027events\u0027]-\u003Edispatch(","122":"            new RequestHandled($request, $response)","123":"        );","124":"","125":"        return $response;"},"file":"\/home\/vagrant\/ProjectLaravel\/vendor\/laravel\/framework\/src\/Illuminate\/Foundation\/Http\/Kernel.php","is_application_frame":false},{"line_number":55,"method":"[top]","class":null,"code_snippet":{"31":"| We need to illuminate PHP development, so let us turn on the lights.","32":"| This bootstraps the framework and gets it ready for use, then it","33":"| will load up this application so that we can run it and send","34":"| the responses back to the browser and delight our users.","35":"|","36":"*\/","37":"","38":"$app = require_once __DIR__.\u0027\/..\/bootstrap\/app.php\u0027;","39":"","40":"\/*","41":"|--------------------------------------------------------------------------","42":"| Run The Application","43":"|--------------------------------------------------------------------------","44":"|","45":"| Once we have the application, we can handle the incoming request","46":"| through the kernel, and send the associated response back to","47":"| the client\u0027s browser allowing them to enjoy the creative","48":"| and wonderful application we have prepared for them.","49":"|","50":"*\/","51":"","52":"$kernel = $app-\u003Emake(Illuminate\\Contracts\\Http\\Kernel::class);","53":"","54":"$response = $kernel-\u003Ehandle(","55":"    $request = Illuminate\\Http\\Request::capture()","56":");","57":"","58":"$response-\u003Esend();","59":"","60":"$kernel-\u003Eterminate($request, $response);","61":""},"file":"\/home\/vagrant\/ProjectLaravel\/public\/index.php","is_application_frame":false}],"context":{"request":{"url":"http:\/\/b3789e93786d.ngrok.io\/password\/reset\/Arachni-dc1fd3348d199f5e66655a1b9ebcc24e","ip":null,"method":"PUT","useragent":"Arachni\/v2.0dev"},"request_data":{"queryString":[],"body":[],"files":[]},"headers":{"x-forwarded-for":["115.134.146.242"],"expect":["100-continue"],"content-length":["55"],"cookie":["XSRF-TOKEN=eyJpdiI6Ik1QSThTc2x0UnVyVWJxdTJHQm1GV3c9PSIsInZhbHVlIjoibUw4Qkw5ZUtCR0FMK3c5XC9IVU1tdjBYdnlsZkh4ZGdMOXdyaFdVTDFTbCtNYnZXeWtyWTNNdERndGE1S2VKSFFJcmViSm9tc3BNWGNoM2VtKytMdWZ3NzAzN0JyUFJ4NFJJVHVNbjAzVkZCdjVVbUNYU25hR3BDZkJIS09zOHZNIiwibWFjIjoiMzY3MzZmYWRlY2ZhOGIwZTVhYzE4MTBhZTZmYjY3NmMxZWFhMjNiMDAxODczYWUwZTg0MjJiY2E1YjI1Mzc0MyJ9;laravel_session=eyJpdiI6IkJVaDU1MTZRR0JyUng0Z1hydWs1Y0E9PSIsInZhbHVlIjoiUGlndUtzWXhoUzZYZEhjZ3E2MmNMdlwvMjVvMlJGTW1iSWxWazBFSzJTdzV1bDNPaDdTazdKRisrdlwvdDRVWE9IYk9LcXg5SE83VUNvdHRXUENxNm44ZkJQQ0xMcGhOWFNnaGZcL20ySlwvdXNUSUZkSDArS0hGMXZLaHQ0S3hDZ3N4IiwibWFjIjoiZjIzOTlhZmEyNGZhZjc5MjAyZjQ5MmMwYmE1MGI2MjZiNTVkMjBmNTNlY2I1ZjY0ODJiNDZhZGI2ZDFhYTEyZiJ9"],"x-arachni-scan-seed":["dc1fd3348d199f5e66655a1b9ebcc24e"],"accept-language":["en-US,en;q=0.8,he;q=0.6"],"accept":["text\/html,application\/xhtml+xml,application\/xml;q=0.9,*\/*;q=0.8"],"user-agent":["Arachni\/v2.0dev"],"accept-encoding":["gzip, deflate"],"host":["b3789e93786d.ngrok.io"],"content-type":[""]},"cookies":{"XSRF-TOKEN":"eyJpdiI6Ik1QSThTc2x0UnVyVWJxdTJHQm1GV3c9PSIsInZhbHVlIjoibUw4Qkw5ZUtCR0FMK3c5XC9IVU1tdjBYdnlsZkh4ZGdMOXdyaFdVTDFTbCtNYnZXeWtyWTNNdERndGE1S2VKSFFJcmViSm9tc3BNWGNoM2VtKytMdWZ3NzAzN0JyUFJ4NFJJVHVNbjAzVkZCdjVVbUNYU25hR3BDZkJIS09zOHZNIiwibWFjIjoiMzY3MzZmYWRlY2ZhOGIwZTVhYzE4MTBhZTZmYjY3NmMxZWFhMjNiMDAxODczYWUwZTg0MjJiY2E1YjI1Mzc0MyJ9","laravel_session":"eyJpdiI6IkJVaDU1MTZRR0JyUng0Z1hydWs1Y0E9PSIsInZhbHVlIjoiUGlndUtzWXhoUzZYZEhjZ3E2MmNMdlwvMjVvMlJGTW1iSWxWazBFSzJTdzV1bDNPaDdTazdKRisrdlwvdDRVWE9IYk9LcXg5SE83VUNvdHRXUENxNm44ZkJQQ0xMcGhOWFNnaGZcL20ySlwvdXNUSUZkSDArS0hGMXZLaHQ0S3hDZ3N4IiwibWFjIjoiZjIzOTlhZmEyNGZhZjc5MjAyZjQ5MmMwYmE1MGI2MjZiNTVkMjBmNTNlY2I1ZjY0ODJiNDZhZGI2ZDFhYTEyZiJ9"},"session":[],"route":{"route":null,"routeParameters":[],"controllerAction":null,"middleware":[]},"user":[],"env":{"laravel_version":"6.20.2","laravel_locale":"en","laravel_config_cached":false,"php_version":"7.4.11"},"logs":[],"dumps":[],"queries":[],"git":{"hash":"","message":"","tag":"","remote":"","isDirty":false}},"stage":"local","message_level":null,"open_frame_index":null,"group_by":"topFrame","application_path":"\/home\/vagrant\/ProjectLaravel"},"config":{"editor":"phpstorm","remoteSitesPath":"","localSitesPath":"","theme":"light","enableShareButton":true,"enableRunnableSolutions":true,"directorySeparator":"\/"},"solutions":[],"telescopeUrl":null,"shareEndpoint":"http:\/\/b3789e93786d.ngrok.io\/_ignition\/share-report","defaultTab":"StackTab","defaultTabProps":[]}
    window.tabs = [];
</script>

<noscript><pre>Symfony\Component\HttpKernel\Exception\MethodNotAllowedHttpException: The PUT method is not supported for this route. Supported methods: GET, HEAD. in file /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/RouteCollection.php on line 256

#0 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/RouteCollection.php(242): Illuminate\Routing\RouteCollection->methodNotAllowed()
#1 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/RouteCollection.php(176): Illuminate\Routing\RouteCollection->getRouteForMethods()
#2 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/Router.php(635): Illuminate\Routing\RouteCollection->match()
#3 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/Router.php(624): Illuminate\Routing\Router->findRoute()
#4 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/Router.php(613): Illuminate\Routing\Router->dispatchToRoute()
#5 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(170): Illuminate\Routing\Router->dispatch()
#6 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(130): Illuminate\Foundation\Http\Kernel->Illuminate\Foundation\Http\{closure}()
#7 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TransformsRequest.php(21): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#8 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\TransformsRequest->handle()
#9 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/CheckForMaintenanceMode.php(63): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#10 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode->handle()
#11 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/ValidatePostSize.php(27): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#12 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\ValidatePostSize->handle()
#13 /home/vagrant/ProjectLaravel/vendor/fideloper/proxy/src/TrustProxies.php(57): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#14 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Fideloper\Proxy\TrustProxies->handle()
#15 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TransformsRequest.php(21): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#16 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(171): Illuminate\Foundation\Http\Middleware\TransformsRequest->handle()
#17 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php(105): Illuminate\Pipeline\Pipeline->Illuminate\Pipeline\{closure}()
#18 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(145): Illuminate\Pipeline\Pipeline->then()
#19 /home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php(110): Illuminate\Foundation\Http\Kernel->sendRequestThroughRouter()
#20 /home/vagrant/ProjectLaravel/public/index.php(55): Illuminate\Foundation\Http\Kernel->handle()
#21 {main}
</pre></noscript>

<div id="app"></div>

<script>!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)||Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="/",n(n.s=280)}([function(t,e,n){"use strict";function r(t,e,n,r,o,i,a,s){var c,u="function"==typeof t?t.options:t;if(e&&(u.render=e,u.staticRenderFns=n,u._compiled=!0),r&&(u.functional=!0),i&&(u._scopeId="data-v-"+i),a?(c=function(t){(t=t||this.$vnode&&this.$vnode.ssrContext||this.parent&&this.parent.$vnode&&this.parent.$vnode.ssrContext)||"undefined"==typeof __VUE_SSR_CONTEXT__||(t=__VUE_SSR_CONTEXT__),o&&o.call(this,t),t&&t._registeredComponents&&t._registeredComponents.add(a)},u._ssrRegister=c):o&&(c=s?function(){o.call(this,this.$root.$options.shadowRoot)}:o),c)if(u.functional){u._injectStyles=c;var l=u.render;u.render=function(t,e){return c.call(e),l(t,e)}}else{var f=u.beforeCreate;u.beforeCreate=f?[].concat(f,c):[c]}return{exports:t,options:u}}n.d(e,"a",function(){return r})},function(t,e,n){"use strict";var r=Object.prototype.hasOwnProperty;function o(t,e){return r.call(t,e)}function i(t){return!(t>=55296&&t<=57343)&&(!(t>=64976&&t<=65007)&&(65535!=(65535&t)&&65534!=(65535&t)&&(!(t>=0&&t<=8)&&(11!==t&&(!(t>=14&&t<=31)&&(!(t>=127&&t<=159)&&!(t>1114111)))))))}function a(t){if(t>65535){var e=55296+((t-=65536)>>10),n=56320+(1023&t);return String.fromCharCode(e,n)}return String.fromCharCode(t)}var s=/\\([!"#$%&'()*+,\-.\/:;<=>?@[\\\]^_`{|}~])/g,c=new RegExp(s.source+"|"+/&([a-z#][a-z0-9]{1,31});/gi.source,"gi"),u=/^#((?:x[a-f0-9]{1,8}|[0-9]{1,8}))/i,l=n(55);var f=/[&<>"]/,p=/[&<>"]/g,d={"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;"};function h(t){return d[t]}var m=/[.?*+^$[\]\\(){}|-]/g;var g=n(36);e.lib={},e.lib.mdurl=n(56),e.lib.ucmicro=n(107),e.assign=function(t){return Array.prototype.slice.call(arguments,1).forEach(function(e){if(e){if("object"!=typeof e)throw new TypeError(e+"must be object");Object.keys(e).forEach(function(n){t[n]=e[n]})}}),t},e.isString=function(t){return"[object String]"===function(t){return Object.prototype.toString.call(t)}(t)},e.has=o,e.unescapeMd=function(t){return t.indexOf("\\")<0?t:t.replace(s,"$1")},e.unescapeAll=function(t){return t.indexOf("\\")<0&&t.indexOf("&")<0?t:t.replace(c,function(t,e,n){return e||function(t,e){var n=0;return o(l,e)?l[e]:35===e.charCodeAt(0)&&u.test(e)&&i(n="x"===e[1].toLowerCase()?parseInt(e.slice(2),16):parseInt(e.slice(1),10))?a(n):t}(t,n)})},e.isValidEntityCode=i,e.fromCodePoint=a,e.escapeHtml=function(t){return f.test(t)?t.replace(p,h):t},e.arrayReplaceAt=function(t,e,n){return[].concat(t.slice(0,e),n,t.slice(e+1))},e.isSpace=function(t){switch(t){case 9:case 32:return!0}return!1},e.isWhiteSpace=function(t){if(t>=8192&&t<=8202)return!0;switch(t){case 9:case 10:case 11:case 12:case 13:case 32:case 160:case 5760:case 8239:case 8287:case 12288:return!0}return!1},e.isMdAsciiPunct=function(t){switch(t){case 33:case 34:case 35:case 36:case 37:case 38:case 39:case 40:case 41:case 42:case 43:case 44:case 45:case 46:case 47:case 58:case 59:case 60:case 61:case 62:case 63:case 64:case 91:case 92:case 93:case 94:case 95:case 96:case 123:case 124:case 125:case 126:return!0;default:return!1}},e.isPunctChar=function(t){return g.test(t)},e.escapeRE=function(t){return t.replace(m,"\\$&")},e.normalizeReference=function(t){return t=t.trim().replace(/\s+/g," "),"Ṿ"==="ẞ".toLowerCase()&&(t=t.replace(/ẞ/g,"ß")),t.toLowerCase().toUpperCase()}},function(t,e,n){"use strict";e.a={functional:!0,props:{label:{default:""}},render:function(t,e){return[t("dt",{attrs:{class:"definition-label"}},e.props.label),t("dd",{attrs:{class:"definition-value"}},e.children)]}}},function(t,e,n){"use strict";var r={props:{title:{default:""},className:{default:""}}},o=n(0),i=Object(o.a)(r,function(){var t=this,e=t.$createElement,n=t._self._c||e;return n("div",{class:t.className},[t.title?n("h3",{staticClass:"definition-list-title"},[t._v(t._s(t.title))]):t._e(),t._v(" "),this.$slots.default?n("dl",{staticClass:"definition-list"},[t._t("default")],2):t._e(),t._v(" "),this.$slots.default?t._e():n("div",{staticClass:"definition-list"},[n("div",{staticClass:"definition-list-empty"},[t._v("—")])])])},[],!1,null,null,null);e.a=i.exports},function(t,e,n){var r=n(160),o=n(161),i=n(162);t.exports=function(t){return r(t)||o(t)||i()}},function(t,e,n){"use strict";var r=n(33),o={props:{file:{required:!0},editable:{default:!1},relative:{default:!0},lineNumber:{required:!1},pathClass:{default:""}},data:function(){return{segments:[],filename:"",fileSegments:[]}},inject:["config","report"],watch:{file:{immediate:!0,handler:function(){this.segments=this.path.replace(/^\/Users/,"~").split("/"),this.filename=this.segments.pop()||"",this.fileSegments=this.filename.split(".")}}},computed:{path:function(){return this.relative?this.file.replace(this.report.application_path+"/",""):this.file},editorUrl:function(){return Object(r.a)(this.config,this.file,this.lineNumber)}}},i=n(0),a=Object(i.a)(o,function(){var t=this,e=t.$createElement,n=t._self._c||e;return n("span",{staticClass:"inline-flex justify-start items-baseline"},[n("span",t._g({staticClass:"ui-path",class:t.pathClass},t.$listeners),[t._l(t.segments,function(e,r){return n("span",{key:"segment-"+r},[t._v(t._s(e)+"/"),n("wbr")])}),t._l(t.fileSegments,function(e,r){return n("span",{key:"file-"+r,class:0===r?"font-semibold":""},[t._v(t._s(r>0?".":"")+t._s(e))])}),t.lineNumber?n("span",[t._v(":"+t._s(t.lineNumber))]):t._e()],2),t._v(" "),t._t("default"),t._v(" "),t.editable&&t.editorUrl?n("a",{staticClass:"ml-2 inline-block text-sm text-purple-400 hover:text-purple-500",attrs:{href:t.editorUrl}},[n("Icon",{attrs:{name:"pencil"}})],1):t._e()],2)},[],!1,null,null,null);e.a=a.exports},function(t,e){t.exports=function(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}},function(t,e,n){"use strict";(function(t,n){
/*!
 * Vue.js v2.6.10
 * (c) 2014-2019 Evan You
 * Released under the MIT License.
 */
var r=Object.freeze({});function o(t){return null==t}function i(t){return null!=t}function a(t){return!0===t}function s(t){return"string"==typeof t||"number"==typeof t||"symbol"==typeof t||"boolean"==typeof t}function c(t){return null!==t&&"object"==typeof t}var u=Object.prototype.toString;function l(t){return"[object Object]"===u.call(t)}function f(t){return"[object RegExp]"===u.call(t)}function p(t){var e=parseFloat(String(t));return e>=0&&Math.floor(e)===e&&isFinite(t)}function d(t){return i(t)&&"function"==typeof t.then&&"function"==typeof t.catch}function h(t){return null==t?"":Array.isArray(t)||l(t)&&t.toString===u?JSON.stringify(t,null,2):String(t)}function m(t){var e=parseFloat(t);return isNaN(e)?t:e}function g(t,e){for(var n=Object.create(null),r=t.split(","),o=0;o<r.length;o++)n[r[o]]=!0;return e?function(t){return n[t.toLowerCase()]}:function(t){return n[t]}}var v=g("slot,component",!0),b=g("key,ref,slot,slot-scope,is");function _(t,e){if(t.length){var n=t.indexOf(e);if(n>-1)return t.splice(n,1)}}var y=Object.prototype.hasOwnProperty;function E(t,e){return y.call(t,e)}function k(t){var e=Object.create(null);return function(n){return e[n]||(e[n]=t(n))}}var x=/-(\w)/g,w=k(function(t){return t.replace(x,function(t,e){return e?e.toUpperCase():""})}),C=k(function(t){return t.charAt(0).toUpperCase()+t.slice(1)}),A=/\B([A-Z])/g,T=k(function(t){return t.replace(A,"-$1").toLowerCase()});var S=Function.prototype.bind?function(t,e){return t.bind(e)}:function(t,e){function n(n){var r=arguments.length;return r?r>1?t.apply(e,arguments):t.call(e,n):t.call(e)}return n._length=t.length,n};function R(t,e){e=e||0;for(var n=t.length-e,r=new Array(n);n--;)r[n]=t[n+e];return r}function O(t,e){for(var n in e)t[n]=e[n];return t}function N(t){for(var e={},n=0;n<t.length;n++)t[n]&&O(e,t[n]);return e}function L(t,e,n){}var I=function(t,e,n){return!1},D=function(t){return t};function M(t,e){if(t===e)return!0;var n=c(t),r=c(e);if(!n||!r)return!n&&!r&&String(t)===String(e);try{var o=Array.isArray(t),i=Array.isArray(e);if(o&&i)return t.length===e.length&&t.every(function(t,n){return M(t,e[n])});if(t instanceof Date&&e instanceof Date)return t.getTime()===e.getTime();if(o||i)return!1;var a=Object.keys(t),s=Object.keys(e);return a.length===s.length&&a.every(function(n){return M(t[n],e[n])})}catch(t){return!1}}function P(t,e){for(var n=0;n<t.length;n++)if(M(t[n],e))return n;return-1}function j(t){var e=!1;return function(){e||(e=!0,t.apply(this,arguments))}}var U="data-server-rendered",F=["component","directive","filter"],$=["beforeCreate","created","beforeMount","mounted","beforeUpdate","updated","beforeDestroy","destroyed","activated","deactivated","errorCaptured","serverPrefetch"],B={optionMergeStrategies:Object.create(null),silent:!1,productionTip:!1,devtools:!1,performance:!1,errorHandler:null,warnHandler:null,ignoredElements:[],keyCodes:Object.create(null),isReservedTag:I,isReservedAttr:I,isUnknownElement:I,getTagNamespace:L,parsePlatformTagName:D,mustUseProp:I,async:!0,_lifecycleHooks:$},z=/a-zA-Z\u00B7\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u037D\u037F-\u1FFF\u200C-\u200D\u203F-\u2040\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD/;function q(t){var e=(t+"").charCodeAt(0);return 36===e||95===e}function H(t,e,n,r){Object.defineProperty(t,e,{value:n,enumerable:!!r,writable:!0,configurable:!0})}var G=new RegExp("[^"+z.source+".$_\\d]");var V,W="__proto__"in{},Y="undefined"!=typeof window,K="undefined"!=typeof WXEnvironment&&!!WXEnvironment.platform,X=K&&WXEnvironment.platform.toLowerCase(),Z=Y&&window.navigator.userAgent.toLowerCase(),J=Z&&/msie|trident/.test(Z),Q=Z&&Z.indexOf("msie 9.0")>0,tt=Z&&Z.indexOf("edge/")>0,et=(Z&&Z.indexOf("android"),Z&&/iphone|ipad|ipod|ios/.test(Z)||"ios"===X),nt=(Z&&/chrome\/\d+/.test(Z),Z&&/phantomjs/.test(Z),Z&&Z.match(/firefox\/(\d+)/)),rt={}.watch,ot=!1;if(Y)try{var it={};Object.defineProperty(it,"passive",{get:function(){ot=!0}}),window.addEventListener("test-passive",null,it)}catch(t){}var at=function(){return void 0===V&&(V=!Y&&!K&&void 0!==t&&(t.process&&"server"===t.process.env.VUE_ENV)),V},st=Y&&window.__VUE_DEVTOOLS_GLOBAL_HOOK__;function ct(t){return"function"==typeof t&&/native code/.test(t.toString())}var ut,lt="undefined"!=typeof Symbol&&ct(Symbol)&&"undefined"!=typeof Reflect&&ct(Reflect.ownKeys);ut="undefined"!=typeof Set&&ct(Set)?Set:function(){function t(){this.set=Object.create(null)}return t.prototype.has=function(t){return!0===this.set[t]},t.prototype.add=function(t){this.set[t]=!0},t.prototype.clear=function(){this.set=Object.create(null)},t}();var ft=L,pt=0,dt=function(){this.id=pt++,this.subs=[]};dt.prototype.addSub=function(t){this.subs.push(t)},dt.prototype.removeSub=function(t){_(this.subs,t)},dt.prototype.depend=function(){dt.target&&dt.target.addDep(this)},dt.prototype.notify=function(){var t=this.subs.slice();for(var e=0,n=t.length;e<n;e++)t[e].update()},dt.target=null;var ht=[];function mt(t){ht.push(t),dt.target=t}function gt(){ht.pop(),dt.target=ht[ht.length-1]}var vt=function(t,e,n,r,o,i,a,s){this.tag=t,this.data=e,this.children=n,this.text=r,this.elm=o,this.ns=void 0,this.context=i,this.fnContext=void 0,this.fnOptions=void 0,this.fnScopeId=void 0,this.key=e&&e.key,this.componentOptions=a,this.componentInstance=void 0,this.parent=void 0,this.raw=!1,this.isStatic=!1,this.isRootInsert=!0,this.isComment=!1,this.isCloned=!1,this.isOnce=!1,this.asyncFactory=s,this.asyncMeta=void 0,this.isAsyncPlaceholder=!1},bt={child:{configurable:!0}};bt.child.get=function(){return this.componentInstance},Object.defineProperties(vt.prototype,bt);var _t=function(t){void 0===t&&(t="");var e=new vt;return e.text=t,e.isComment=!0,e};function yt(t){return new vt(void 0,void 0,void 0,String(t))}function Et(t){var e=new vt(t.tag,t.data,t.children&&t.children.slice(),t.text,t.elm,t.context,t.componentOptions,t.asyncFactory);return e.ns=t.ns,e.isStatic=t.isStatic,e.key=t.key,e.isComment=t.isComment,e.fnContext=t.fnContext,e.fnOptions=t.fnOptions,e.fnScopeId=t.fnScopeId,e.asyncMeta=t.asyncMeta,e.isCloned=!0,e}var kt=Array.prototype,xt=Object.create(kt);["push","pop","shift","unshift","splice","sort","reverse"].forEach(function(t){var e=kt[t];H(xt,t,function(){for(var n=[],r=arguments.length;r--;)n[r]=arguments[r];var o,i=e.apply(this,n),a=this.__ob__;switch(t){case"push":case"unshift":o=n;break;case"splice":o=n.slice(2)}return o&&a.observeArray(o),a.dep.notify(),i})});var wt=Object.getOwnPropertyNames(xt),Ct=!0;function At(t){Ct=t}var Tt=function(t){this.value=t,this.dep=new dt,this.vmCount=0,H(t,"__ob__",this),Array.isArray(t)?(W?function(t,e){t.__proto__=e}(t,xt):function(t,e,n){for(var r=0,o=n.length;r<o;r++){var i=n[r];H(t,i,e[i])}}(t,xt,wt),this.observeArray(t)):this.walk(t)};function St(t,e){var n;if(c(t)&&!(t instanceof vt))return E(t,"__ob__")&&t.__ob__ instanceof Tt?n=t.__ob__:Ct&&!at()&&(Array.isArray(t)||l(t))&&Object.isExtensible(t)&&!t._isVue&&(n=new Tt(t)),e&&n&&n.vmCount++,n}function Rt(t,e,n,r,o){var i=new dt,a=Object.getOwnPropertyDescriptor(t,e);if(!a||!1!==a.configurable){var s=a&&a.get,c=a&&a.set;s&&!c||2!==arguments.length||(n=t[e]);var u=!o&&St(n);Object.defineProperty(t,e,{enumerable:!0,configurable:!0,get:function(){var e=s?s.call(t):n;return dt.target&&(i.depend(),u&&(u.dep.depend(),Array.isArray(e)&&function t(e){for(var n=void 0,r=0,o=e.length;r<o;r++)(n=e[r])&&n.__ob__&&n.__ob__.dep.depend(),Array.isArray(n)&&t(n)}(e))),e},set:function(e){var r=s?s.call(t):n;e===r||e!=e&&r!=r||s&&!c||(c?c.call(t,e):n=e,u=!o&&St(e),i.notify())}})}}function Ot(t,e,n){if(Array.isArray(t)&&p(e))return t.length=Math.max(t.length,e),t.splice(e,1,n),n;if(e in t&&!(e in Object.prototype))return t[e]=n,n;var r=t.__ob__;return t._isVue||r&&r.vmCount?n:r?(Rt(r.value,e,n),r.dep.notify(),n):(t[e]=n,n)}function Nt(t,e){if(Array.isArray(t)&&p(e))t.splice(e,1);else{var n=t.__ob__;t._isVue||n&&n.vmCount||E(t,e)&&(delete t[e],n&&n.dep.notify())}}Tt.prototype.walk=function(t){for(var e=Object.keys(t),n=0;n<e.length;n++)Rt(t,e[n])},Tt.prototype.observeArray=function(t){for(var e=0,n=t.length;e<n;e++)St(t[e])};var Lt=B.optionMergeStrategies;function It(t,e){if(!e)return t;for(var n,r,o,i=lt?Reflect.ownKeys(e):Object.keys(e),a=0;a<i.length;a++)"__ob__"!==(n=i[a])&&(r=t[n],o=e[n],E(t,n)?r!==o&&l(r)&&l(o)&&It(r,o):Ot(t,n,o));return t}function Dt(t,e,n){return n?function(){var r="function"==typeof e?e.call(n,n):e,o="function"==typeof t?t.call(n,n):t;return r?It(r,o):o}:e?t?function(){return It("function"==typeof e?e.call(this,this):e,"function"==typeof t?t.call(this,this):t)}:e:t}function Mt(t,e){var n=e?t?t.concat(e):Array.isArray(e)?e:[e]:t;return n?function(t){for(var e=[],n=0;n<t.length;n++)-1===e.indexOf(t[n])&&e.push(t[n]);return e}(n):n}function Pt(t,e,n,r){var o=Object.create(t||null);return e?O(o,e):o}Lt.data=function(t,e,n){return n?Dt(t,e,n):e&&"function"!=typeof e?t:Dt(t,e)},$.forEach(function(t){Lt[t]=Mt}),F.forEach(function(t){Lt[t+"s"]=Pt}),Lt.watch=function(t,e,n,r){if(t===rt&&(t=void 0),e===rt&&(e=void 0),!e)return Object.create(t||null);if(!t)return e;var o={};for(var i in O(o,t),e){var a=o[i],s=e[i];a&&!Array.isArray(a)&&(a=[a]),o[i]=a?a.concat(s):Array.isArray(s)?s:[s]}return o},Lt.props=Lt.methods=Lt.inject=Lt.computed=function(t,e,n,r){if(!t)return e;var o=Object.create(null);return O(o,t),e&&O(o,e),o},Lt.provide=Dt;var jt=function(t,e){return void 0===e?t:e};function Ut(t,e,n){if("function"==typeof e&&(e=e.options),function(t,e){var n=t.props;if(n){var r,o,i={};if(Array.isArray(n))for(r=n.length;r--;)"string"==typeof(o=n[r])&&(i[w(o)]={type:null});else if(l(n))for(var a in n)o=n[a],i[w(a)]=l(o)?o:{type:o};t.props=i}}(e),function(t,e){var n=t.inject;if(n){var r=t.inject={};if(Array.isArray(n))for(var o=0;o<n.length;o++)r[n[o]]={from:n[o]};else if(l(n))for(var i in n){var a=n[i];r[i]=l(a)?O({from:i},a):{from:a}}}}(e),function(t){var e=t.directives;if(e)for(var n in e){var r=e[n];"function"==typeof r&&(e[n]={bind:r,update:r})}}(e),!e._base&&(e.extends&&(t=Ut(t,e.extends,n)),e.mixins))for(var r=0,o=e.mixins.length;r<o;r++)t=Ut(t,e.mixins[r],n);var i,a={};for(i in t)s(i);for(i in e)E(t,i)||s(i);function s(r){var o=Lt[r]||jt;a[r]=o(t[r],e[r],n,r)}return a}function Ft(t,e,n,r){if("string"==typeof n){var o=t[e];if(E(o,n))return o[n];var i=w(n);if(E(o,i))return o[i];var a=C(i);return E(o,a)?o[a]:o[n]||o[i]||o[a]}}function $t(t,e,n,r){var o=e[t],i=!E(n,t),a=n[t],s=qt(Boolean,o.type);if(s>-1)if(i&&!E(o,"default"))a=!1;else if(""===a||a===T(t)){var c=qt(String,o.type);(c<0||s<c)&&(a=!0)}if(void 0===a){a=function(t,e,n){if(!E(e,"default"))return;var r=e.default;0;if(t&&t.$options.propsData&&void 0===t.$options.propsData[n]&&void 0!==t._props[n])return t._props[n];return"function"==typeof r&&"Function"!==Bt(e.type)?r.call(t):r}(r,o,t);var u=Ct;At(!0),St(a),At(u)}return a}function Bt(t){var e=t&&t.toString().match(/^\s*function (\w+)/);return e?e[1]:""}function zt(t,e){return Bt(t)===Bt(e)}function qt(t,e){if(!Array.isArray(e))return zt(e,t)?0:-1;for(var n=0,r=e.length;n<r;n++)if(zt(e[n],t))return n;return-1}function Ht(t,e,n){mt();try{if(e)for(var r=e;r=r.$parent;){var o=r.$options.errorCaptured;if(o)for(var i=0;i<o.length;i++)try{if(!1===o[i].call(r,t,e,n))return}catch(t){Vt(t,r,"errorCaptured hook")}}Vt(t,e,n)}finally{gt()}}function Gt(t,e,n,r,o){var i;try{(i=n?t.apply(e,n):t.call(e))&&!i._isVue&&d(i)&&!i._handled&&(i.catch(function(t){return Ht(t,r,o+" (Promise/async)")}),i._handled=!0)}catch(t){Ht(t,r,o)}return i}function Vt(t,e,n){if(B.errorHandler)try{return B.errorHandler.call(null,t,e,n)}catch(e){e!==t&&Wt(e,null,"config.errorHandler")}Wt(t,e,n)}function Wt(t,e,n){if(!Y&&!K||"undefined"==typeof console)throw t;console.error(t)}var Yt,Kt=!1,Xt=[],Zt=!1;function Jt(){Zt=!1;var t=Xt.slice(0);Xt.length=0;for(var e=0;e<t.length;e++)t[e]()}if("undefined"!=typeof Promise&&ct(Promise)){var Qt=Promise.resolve();Yt=function(){Qt.then(Jt),et&&setTimeout(L)},Kt=!0}else if(J||"undefined"==typeof MutationObserver||!ct(MutationObserver)&&"[object MutationObserverConstructor]"!==MutationObserver.toString())Yt=void 0!==n&&ct(n)?function(){n(Jt)}:function(){setTimeout(Jt,0)};else{var te=1,ee=new MutationObserver(Jt),ne=document.createTextNode(String(te));ee.observe(ne,{characterData:!0}),Yt=function(){te=(te+1)%2,ne.data=String(te)},Kt=!0}function re(t,e){var n;if(Xt.push(function(){if(t)try{t.call(e)}catch(t){Ht(t,e,"nextTick")}else n&&n(e)}),Zt||(Zt=!0,Yt()),!t&&"undefined"!=typeof Promise)return new Promise(function(t){n=t})}var oe=new ut;function ie(t){!function t(e,n){var r,o;var i=Array.isArray(e);if(!i&&!c(e)||Object.isFrozen(e)||e instanceof vt)return;if(e.__ob__){var a=e.__ob__.dep.id;if(n.has(a))return;n.add(a)}if(i)for(r=e.length;r--;)t(e[r],n);else for(o=Object.keys(e),r=o.length;r--;)t(e[o[r]],n)}(t,oe),oe.clear()}var ae=k(function(t){var e="&"===t.charAt(0),n="~"===(t=e?t.slice(1):t).charAt(0),r="!"===(t=n?t.slice(1):t).charAt(0);return{name:t=r?t.slice(1):t,once:n,capture:r,passive:e}});function se(t,e){function n(){var t=arguments,r=n.fns;if(!Array.isArray(r))return Gt(r,null,arguments,e,"v-on handler");for(var o=r.slice(),i=0;i<o.length;i++)Gt(o[i],null,t,e,"v-on handler")}return n.fns=t,n}function ce(t,e,n,r,i,s){var c,u,l,f;for(c in t)u=t[c],l=e[c],f=ae(c),o(u)||(o(l)?(o(u.fns)&&(u=t[c]=se(u,s)),a(f.once)&&(u=t[c]=i(f.name,u,f.capture)),n(f.name,u,f.capture,f.passive,f.params)):u!==l&&(l.fns=u,t[c]=l));for(c in e)o(t[c])&&r((f=ae(c)).name,e[c],f.capture)}function ue(t,e,n){var r;t instanceof vt&&(t=t.data.hook||(t.data.hook={}));var s=t[e];function c(){n.apply(this,arguments),_(r.fns,c)}o(s)?r=se([c]):i(s.fns)&&a(s.merged)?(r=s).fns.push(c):r=se([s,c]),r.merged=!0,t[e]=r}function le(t,e,n,r,o){if(i(e)){if(E(e,n))return t[n]=e[n],o||delete e[n],!0;if(E(e,r))return t[n]=e[r],o||delete e[r],!0}return!1}function fe(t){return s(t)?[yt(t)]:Array.isArray(t)?function t(e,n){var r=[];var c,u,l,f;for(c=0;c<e.length;c++)o(u=e[c])||"boolean"==typeof u||(l=r.length-1,f=r[l],Array.isArray(u)?u.length>0&&(pe((u=t(u,(n||"")+"_"+c))[0])&&pe(f)&&(r[l]=yt(f.text+u[0].text),u.shift()),r.push.apply(r,u)):s(u)?pe(f)?r[l]=yt(f.text+u):""!==u&&r.push(yt(u)):pe(u)&&pe(f)?r[l]=yt(f.text+u.text):(a(e._isVList)&&i(u.tag)&&o(u.key)&&i(n)&&(u.key="__vlist"+n+"_"+c+"__"),r.push(u)));return r}(t):void 0}function pe(t){return i(t)&&i(t.text)&&!1===t.isComment}function de(t,e){if(t){for(var n=Object.create(null),r=lt?Reflect.ownKeys(t):Object.keys(t),o=0;o<r.length;o++){var i=r[o];if("__ob__"!==i){for(var a=t[i].from,s=e;s;){if(s._provided&&E(s._provided,a)){n[i]=s._provided[a];break}s=s.$parent}if(!s)if("default"in t[i]){var c=t[i].default;n[i]="function"==typeof c?c.call(e):c}else 0}}return n}}function he(t,e){if(!t||!t.length)return{};for(var n={},r=0,o=t.length;r<o;r++){var i=t[r],a=i.data;if(a&&a.attrs&&a.attrs.slot&&delete a.attrs.slot,i.context!==e&&i.fnContext!==e||!a||null==a.slot)(n.default||(n.default=[])).push(i);else{var s=a.slot,c=n[s]||(n[s]=[]);"template"===i.tag?c.push.apply(c,i.children||[]):c.push(i)}}for(var u in n)n[u].every(me)&&delete n[u];return n}function me(t){return t.isComment&&!t.asyncFactory||" "===t.text}function ge(t,e,n){var o,i=Object.keys(e).length>0,a=t?!!t.$stable:!i,s=t&&t.$key;if(t){if(t._normalized)return t._normalized;if(a&&n&&n!==r&&s===n.$key&&!i&&!n.$hasNormal)return n;for(var c in o={},t)t[c]&&"$"!==c[0]&&(o[c]=ve(e,c,t[c]))}else o={};for(var u in e)u in o||(o[u]=be(e,u));return t&&Object.isExtensible(t)&&(t._normalized=o),H(o,"$stable",a),H(o,"$key",s),H(o,"$hasNormal",i),o}function ve(t,e,n){var r=function(){var t=arguments.length?n.apply(null,arguments):n({});return(t=t&&"object"==typeof t&&!Array.isArray(t)?[t]:fe(t))&&(0===t.length||1===t.length&&t[0].isComment)?void 0:t};return n.proxy&&Object.defineProperty(t,e,{get:r,enumerable:!0,configurable:!0}),r}function be(t,e){return function(){return t[e]}}function _e(t,e){var n,r,o,a,s;if(Array.isArray(t)||"string"==typeof t)for(n=new Array(t.length),r=0,o=t.length;r<o;r++)n[r]=e(t[r],r);else if("number"==typeof t)for(n=new Array(t),r=0;r<t;r++)n[r]=e(r+1,r);else if(c(t))if(lt&&t[Symbol.iterator]){n=[];for(var u=t[Symbol.iterator](),l=u.next();!l.done;)n.push(e(l.value,n.length)),l=u.next()}else for(a=Object.keys(t),n=new Array(a.length),r=0,o=a.length;r<o;r++)s=a[r],n[r]=e(t[s],s,r);return i(n)||(n=[]),n._isVList=!0,n}function ye(t,e,n,r){var o,i=this.$scopedSlots[t];i?(n=n||{},r&&(n=O(O({},r),n)),o=i(n)||e):o=this.$slots[t]||e;var a=n&&n.slot;return a?this.$createElement("template",{slot:a},o):o}function Ee(t){return Ft(this.$options,"filters",t)||D}function ke(t,e){return Array.isArray(t)?-1===t.indexOf(e):t!==e}function xe(t,e,n,r,o){var i=B.keyCodes[e]||n;return o&&r&&!B.keyCodes[e]?ke(o,r):i?ke(i,t):r?T(r)!==e:void 0}function we(t,e,n,r,o){if(n)if(c(n)){var i;Array.isArray(n)&&(n=N(n));var a=function(a){if("class"===a||"style"===a||b(a))i=t;else{var s=t.attrs&&t.attrs.type;i=r||B.mustUseProp(e,s,a)?t.domProps||(t.domProps={}):t.attrs||(t.attrs={})}var c=w(a),u=T(a);c in i||u in i||(i[a]=n[a],o&&((t.on||(t.on={}))["update:"+a]=function(t){n[a]=t}))};for(var s in n)a(s)}else;return t}function Ce(t,e){var n=this._staticTrees||(this._staticTrees=[]),r=n[t];return r&&!e?r:(Te(r=n[t]=this.$options.staticRenderFns[t].call(this._renderProxy,null,this),"__static__"+t,!1),r)}function Ae(t,e,n){return Te(t,"__once__"+e+(n?"_"+n:""),!0),t}function Te(t,e,n){if(Array.isArray(t))for(var r=0;r<t.length;r++)t[r]&&"string"!=typeof t[r]&&Se(t[r],e+"_"+r,n);else Se(t,e,n)}function Se(t,e,n){t.isStatic=!0,t.key=e,t.isOnce=n}function Re(t,e){if(e)if(l(e)){var n=t.on=t.on?O({},t.on):{};for(var r in e){var o=n[r],i=e[r];n[r]=o?[].concat(o,i):i}}else;return t}function Oe(t,e,n,r){e=e||{$stable:!n};for(var o=0;o<t.length;o++){var i=t[o];Array.isArray(i)?Oe(i,e,n):i&&(i.proxy&&(i.fn.proxy=!0),e[i.key]=i.fn)}return r&&(e.$key=r),e}function Ne(t,e){for(var n=0;n<e.length;n+=2){var r=e[n];"string"==typeof r&&r&&(t[e[n]]=e[n+1])}return t}function Le(t,e){return"string"==typeof t?e+t:t}function Ie(t){t._o=Ae,t._n=m,t._s=h,t._l=_e,t._t=ye,t._q=M,t._i=P,t._m=Ce,t._f=Ee,t._k=xe,t._b=we,t._v=yt,t._e=_t,t._u=Oe,t._g=Re,t._d=Ne,t._p=Le}function De(t,e,n,o,i){var s,c=this,u=i.options;E(o,"_uid")?(s=Object.create(o))._original=o:(s=o,o=o._original);var l=a(u._compiled),f=!l;this.data=t,this.props=e,this.children=n,this.parent=o,this.listeners=t.on||r,this.injections=de(u.inject,o),this.slots=function(){return c.$slots||ge(t.scopedSlots,c.$slots=he(n,o)),c.$slots},Object.defineProperty(this,"scopedSlots",{enumerable:!0,get:function(){return ge(t.scopedSlots,this.slots())}}),l&&(this.$options=u,this.$slots=this.slots(),this.$scopedSlots=ge(t.scopedSlots,this.$slots)),u._scopeId?this._c=function(t,e,n,r){var i=qe(s,t,e,n,r,f);return i&&!Array.isArray(i)&&(i.fnScopeId=u._scopeId,i.fnContext=o),i}:this._c=function(t,e,n,r){return qe(s,t,e,n,r,f)}}function Me(t,e,n,r,o){var i=Et(t);return i.fnContext=n,i.fnOptions=r,e.slot&&((i.data||(i.data={})).slot=e.slot),i}function Pe(t,e){for(var n in e)t[w(n)]=e[n]}Ie(De.prototype);var je={init:function(t,e){if(t.componentInstance&&!t.componentInstance._isDestroyed&&t.data.keepAlive){var n=t;je.prepatch(n,n)}else{(t.componentInstance=function(t,e){var n={_isComponent:!0,_parentVnode:t,parent:e},r=t.data.inlineTemplate;i(r)&&(n.render=r.render,n.staticRenderFns=r.staticRenderFns);return new t.componentOptions.Ctor(n)}(t,Qe)).$mount(e?t.elm:void 0,e)}},prepatch:function(t,e){var n=e.componentOptions;!function(t,e,n,o,i){0;var a=o.data.scopedSlots,s=t.$scopedSlots,c=!!(a&&!a.$stable||s!==r&&!s.$stable||a&&t.$scopedSlots.$key!==a.$key),u=!!(i||t.$options._renderChildren||c);t.$options._parentVnode=o,t.$vnode=o,t._vnode&&(t._vnode.parent=o);if(t.$options._renderChildren=i,t.$attrs=o.data.attrs||r,t.$listeners=n||r,e&&t.$options.props){At(!1);for(var l=t._props,f=t.$options._propKeys||[],p=0;p<f.length;p++){var d=f[p],h=t.$options.props;l[d]=$t(d,h,e,t)}At(!0),t.$options.propsData=e}n=n||r;var m=t.$options._parentListeners;t.$options._parentListeners=n,Je(t,n,m),u&&(t.$slots=he(i,o.context),t.$forceUpdate());0}(e.componentInstance=t.componentInstance,n.propsData,n.listeners,e,n.children)},insert:function(t){var e,n=t.context,r=t.componentInstance;r._isMounted||(r._isMounted=!0,rn(r,"mounted")),t.data.keepAlive&&(n._isMounted?((e=r)._inactive=!1,an.push(e)):nn(r,!0))},destroy:function(t){var e=t.componentInstance;e._isDestroyed||(t.data.keepAlive?function t(e,n){if(n&&(e._directInactive=!0,en(e)))return;if(!e._inactive){e._inactive=!0;for(var r=0;r<e.$children.length;r++)t(e.$children[r]);rn(e,"deactivated")}}(e,!0):e.$destroy())}},Ue=Object.keys(je);function Fe(t,e,n,s,u){if(!o(t)){var l=n.$options._base;if(c(t)&&(t=l.extend(t)),"function"==typeof t){var f;if(o(t.cid)&&void 0===(t=function(t,e){if(a(t.error)&&i(t.errorComp))return t.errorComp;if(i(t.resolved))return t.resolved;var n=Ge;n&&i(t.owners)&&-1===t.owners.indexOf(n)&&t.owners.push(n);if(a(t.loading)&&i(t.loadingComp))return t.loadingComp;if(n&&!i(t.owners)){var r=t.owners=[n],s=!0,u=null,l=null;n.$on("hook:destroyed",function(){return _(r,n)});var f=function(t){for(var e=0,n=r.length;e<n;e++)r[e].$forceUpdate();t&&(r.length=0,null!==u&&(clearTimeout(u),u=null),null!==l&&(clearTimeout(l),l=null))},p=j(function(n){t.resolved=Ve(n,e),s?r.length=0:f(!0)}),h=j(function(e){i(t.errorComp)&&(t.error=!0,f(!0))}),m=t(p,h);return c(m)&&(d(m)?o(t.resolved)&&m.then(p,h):d(m.component)&&(m.component.then(p,h),i(m.error)&&(t.errorComp=Ve(m.error,e)),i(m.loading)&&(t.loadingComp=Ve(m.loading,e),0===m.delay?t.loading=!0:u=setTimeout(function(){u=null,o(t.resolved)&&o(t.error)&&(t.loading=!0,f(!1))},m.delay||200)),i(m.timeout)&&(l=setTimeout(function(){l=null,o(t.resolved)&&h(null)},m.timeout)))),s=!1,t.loading?t.loadingComp:t.resolved}}(f=t,l)))return function(t,e,n,r,o){var i=_t();return i.asyncFactory=t,i.asyncMeta={data:e,context:n,children:r,tag:o},i}(f,e,n,s,u);e=e||{},An(t),i(e.model)&&function(t,e){var n=t.model&&t.model.prop||"value",r=t.model&&t.model.event||"input";(e.attrs||(e.attrs={}))[n]=e.model.value;var o=e.on||(e.on={}),a=o[r],s=e.model.callback;i(a)?(Array.isArray(a)?-1===a.indexOf(s):a!==s)&&(o[r]=[s].concat(a)):o[r]=s}(t.options,e);var p=function(t,e,n){var r=e.options.props;if(!o(r)){var a={},s=t.attrs,c=t.props;if(i(s)||i(c))for(var u in r){var l=T(u);le(a,c,u,l,!0)||le(a,s,u,l,!1)}return a}}(e,t);if(a(t.options.functional))return function(t,e,n,o,a){var s=t.options,c={},u=s.props;if(i(u))for(var l in u)c[l]=$t(l,u,e||r);else i(n.attrs)&&Pe(c,n.attrs),i(n.props)&&Pe(c,n.props);var f=new De(n,c,a,o,t),p=s.render.call(null,f._c,f);if(p instanceof vt)return Me(p,n,f.parent,s);if(Array.isArray(p)){for(var d=fe(p)||[],h=new Array(d.length),m=0;m<d.length;m++)h[m]=Me(d[m],n,f.parent,s);return h}}(t,p,e,n,s);var h=e.on;if(e.on=e.nativeOn,a(t.options.abstract)){var m=e.slot;e={},m&&(e.slot=m)}!function(t){for(var e=t.hook||(t.hook={}),n=0;n<Ue.length;n++){var r=Ue[n],o=e[r],i=je[r];o===i||o&&o._merged||(e[r]=o?$e(i,o):i)}}(e);var g=t.options.name||u;return new vt("vue-component-"+t.cid+(g?"-"+g:""),e,void 0,void 0,void 0,n,{Ctor:t,propsData:p,listeners:h,tag:u,children:s},f)}}}function $e(t,e){var n=function(n,r){t(n,r),e(n,r)};return n._merged=!0,n}var Be=1,ze=2;function qe(t,e,n,r,u,l){return(Array.isArray(n)||s(n))&&(u=r,r=n,n=void 0),a(l)&&(u=ze),function(t,e,n,r,s){if(i(n)&&i(n.__ob__))return _t();i(n)&&i(n.is)&&(e=n.is);if(!e)return _t();0;Array.isArray(r)&&"function"==typeof r[0]&&((n=n||{}).scopedSlots={default:r[0]},r.length=0);s===ze?r=fe(r):s===Be&&(r=function(t){for(var e=0;e<t.length;e++)if(Array.isArray(t[e]))return Array.prototype.concat.apply([],t);return t}(r));var u,l;if("string"==typeof e){var f;l=t.$vnode&&t.$vnode.ns||B.getTagNamespace(e),u=B.isReservedTag(e)?new vt(B.parsePlatformTagName(e),n,r,void 0,void 0,t):n&&n.pre||!i(f=Ft(t.$options,"components",e))?new vt(e,n,r,void 0,void 0,t):Fe(f,n,t,r,e)}else u=Fe(e,n,t,r);return Array.isArray(u)?u:i(u)?(i(l)&&function t(e,n,r){e.ns=n;"foreignObject"===e.tag&&(n=void 0,r=!0);if(i(e.children))for(var s=0,c=e.children.length;s<c;s++){var u=e.children[s];i(u.tag)&&(o(u.ns)||a(r)&&"svg"!==u.tag)&&t(u,n,r)}}(u,l),i(n)&&function(t){c(t.style)&&ie(t.style);c(t.class)&&ie(t.class)}(n),u):_t()}(t,e,n,r,u)}var He,Ge=null;function Ve(t,e){return(t.__esModule||lt&&"Module"===t[Symbol.toStringTag])&&(t=t.default),c(t)?e.extend(t):t}function We(t){return t.isComment&&t.asyncFactory}function Ye(t){if(Array.isArray(t))for(var e=0;e<t.length;e++){var n=t[e];if(i(n)&&(i(n.componentOptions)||We(n)))return n}}function Ke(t,e){He.$on(t,e)}function Xe(t,e){He.$off(t,e)}function Ze(t,e){var n=He;return function r(){var o=e.apply(null,arguments);null!==o&&n.$off(t,r)}}function Je(t,e,n){He=t,ce(e,n||{},Ke,Xe,Ze,t),He=void 0}var Qe=null;function tn(t){var e=Qe;return Qe=t,function(){Qe=e}}function en(t){for(;t&&(t=t.$parent);)if(t._inactive)return!0;return!1}function nn(t,e){if(e){if(t._directInactive=!1,en(t))return}else if(t._directInactive)return;if(t._inactive||null===t._inactive){t._inactive=!1;for(var n=0;n<t.$children.length;n++)nn(t.$children[n]);rn(t,"activated")}}function rn(t,e){mt();var n=t.$options[e],r=e+" hook";if(n)for(var o=0,i=n.length;o<i;o++)Gt(n[o],t,null,t,r);t._hasHookEvent&&t.$emit("hook:"+e),gt()}var on=[],an=[],sn={},cn=!1,un=!1,ln=0;var fn=0,pn=Date.now;if(Y&&!J){var dn=window.performance;dn&&"function"==typeof dn.now&&pn()>document.createEvent("Event").timeStamp&&(pn=function(){return dn.now()})}function hn(){var t,e;for(fn=pn(),un=!0,on.sort(function(t,e){return t.id-e.id}),ln=0;ln<on.length;ln++)(t=on[ln]).before&&t.before(),e=t.id,sn[e]=null,t.run();var n=an.slice(),r=on.slice();ln=on.length=an.length=0,sn={},cn=un=!1,function(t){for(var e=0;e<t.length;e++)t[e]._inactive=!0,nn(t[e],!0)}(n),function(t){var e=t.length;for(;e--;){var n=t[e],r=n.vm;r._watcher===n&&r._isMounted&&!r._isDestroyed&&rn(r,"updated")}}(r),st&&B.devtools&&st.emit("flush")}var mn=0,gn=function(t,e,n,r,o){this.vm=t,o&&(t._watcher=this),t._watchers.push(this),r?(this.deep=!!r.deep,this.user=!!r.user,this.lazy=!!r.lazy,this.sync=!!r.sync,this.before=r.before):this.deep=this.user=this.lazy=this.sync=!1,this.cb=n,this.id=++mn,this.active=!0,this.dirty=this.lazy,this.deps=[],this.newDeps=[],this.depIds=new ut,this.newDepIds=new ut,this.expression="","function"==typeof e?this.getter=e:(this.getter=function(t){if(!G.test(t)){var e=t.split(".");return function(t){for(var n=0;n<e.length;n++){if(!t)return;t=t[e[n]]}return t}}}(e),this.getter||(this.getter=L)),this.value=this.lazy?void 0:this.get()};gn.prototype.get=function(){var t;mt(this);var e=this.vm;try{t=this.getter.call(e,e)}catch(t){if(!this.user)throw t;Ht(t,e,'getter for watcher "'+this.expression+'"')}finally{this.deep&&ie(t),gt(),this.cleanupDeps()}return t},gn.prototype.addDep=function(t){var e=t.id;this.newDepIds.has(e)||(this.newDepIds.add(e),this.newDeps.push(t),this.depIds.has(e)||t.addSub(this))},gn.prototype.cleanupDeps=function(){for(var t=this.deps.length;t--;){var e=this.deps[t];this.newDepIds.has(e.id)||e.removeSub(this)}var n=this.depIds;this.depIds=this.newDepIds,this.newDepIds=n,this.newDepIds.clear(),n=this.deps,this.deps=this.newDeps,this.newDeps=n,this.newDeps.length=0},gn.prototype.update=function(){this.lazy?this.dirty=!0:this.sync?this.run():function(t){var e=t.id;if(null==sn[e]){if(sn[e]=!0,un){for(var n=on.length-1;n>ln&&on[n].id>t.id;)n--;on.splice(n+1,0,t)}else on.push(t);cn||(cn=!0,re(hn))}}(this)},gn.prototype.run=function(){if(this.active){var t=this.get();if(t!==this.value||c(t)||this.deep){var e=this.value;if(this.value=t,this.user)try{this.cb.call(this.vm,t,e)}catch(t){Ht(t,this.vm,'callback for watcher "'+this.expression+'"')}else this.cb.call(this.vm,t,e)}}},gn.prototype.evaluate=function(){this.value=this.get(),this.dirty=!1},gn.prototype.depend=function(){for(var t=this.deps.length;t--;)this.deps[t].depend()},gn.prototype.teardown=function(){if(this.active){this.vm._isBeingDestroyed||_(this.vm._watchers,this);for(var t=this.deps.length;t--;)this.deps[t].removeSub(this);this.active=!1}};var vn={enumerable:!0,configurable:!0,get:L,set:L};function bn(t,e,n){vn.get=function(){return this[e][n]},vn.set=function(t){this[e][n]=t},Object.defineProperty(t,n,vn)}function _n(t){t._watchers=[];var e=t.$options;e.props&&function(t,e){var n=t.$options.propsData||{},r=t._props={},o=t.$options._propKeys=[];t.$parent&&At(!1);var i=function(i){o.push(i);var a=$t(i,e,n,t);Rt(r,i,a),i in t||bn(t,"_props",i)};for(var a in e)i(a);At(!0)}(t,e.props),e.methods&&function(t,e){t.$options.props;for(var n in e)t[n]="function"!=typeof e[n]?L:S(e[n],t)}(t,e.methods),e.data?function(t){var e=t.$options.data;l(e=t._data="function"==typeof e?function(t,e){mt();try{return t.call(e,e)}catch(t){return Ht(t,e,"data()"),{}}finally{gt()}}(e,t):e||{})||(e={});var n=Object.keys(e),r=t.$options.props,o=(t.$options.methods,n.length);for(;o--;){var i=n[o];0,r&&E(r,i)||q(i)||bn(t,"_data",i)}St(e,!0)}(t):St(t._data={},!0),e.computed&&function(t,e){var n=t._computedWatchers=Object.create(null),r=at();for(var o in e){var i=e[o],a="function"==typeof i?i:i.get;0,r||(n[o]=new gn(t,a||L,L,yn)),o in t||En(t,o,i)}}(t,e.computed),e.watch&&e.watch!==rt&&function(t,e){for(var n in e){var r=e[n];if(Array.isArray(r))for(var o=0;o<r.length;o++)wn(t,n,r[o]);else wn(t,n,r)}}(t,e.watch)}var yn={lazy:!0};function En(t,e,n){var r=!at();"function"==typeof n?(vn.get=r?kn(e):xn(n),vn.set=L):(vn.get=n.get?r&&!1!==n.cache?kn(e):xn(n.get):L,vn.set=n.set||L),Object.defineProperty(t,e,vn)}function kn(t){return function(){var e=this._computedWatchers&&this._computedWatchers[t];if(e)return e.dirty&&e.evaluate(),dt.target&&e.depend(),e.value}}function xn(t){return function(){return t.call(this,this)}}function wn(t,e,n,r){return l(n)&&(r=n,n=n.handler),"string"==typeof n&&(n=t[n]),t.$watch(e,n,r)}var Cn=0;function An(t){var e=t.options;if(t.super){var n=An(t.super);if(n!==t.superOptions){t.superOptions=n;var r=function(t){var e,n=t.options,r=t.sealedOptions;for(var o in n)n[o]!==r[o]&&(e||(e={}),e[o]=n[o]);return e}(t);r&&O(t.extendOptions,r),(e=t.options=Ut(n,t.extendOptions)).name&&(e.components[e.name]=t)}}return e}function Tn(t){this._init(t)}function Sn(t){t.cid=0;var e=1;t.extend=function(t){t=t||{};var n=this,r=n.cid,o=t._Ctor||(t._Ctor={});if(o[r])return o[r];var i=t.name||n.options.name;var a=function(t){this._init(t)};return(a.prototype=Object.create(n.prototype)).constructor=a,a.cid=e++,a.options=Ut(n.options,t),a.super=n,a.options.props&&function(t){var e=t.options.props;for(var n in e)bn(t.prototype,"_props",n)}(a),a.options.computed&&function(t){var e=t.options.computed;for(var n in e)En(t.prototype,n,e[n])}(a),a.extend=n.extend,a.mixin=n.mixin,a.use=n.use,F.forEach(function(t){a[t]=n[t]}),i&&(a.options.components[i]=a),a.superOptions=n.options,a.extendOptions=t,a.sealedOptions=O({},a.options),o[r]=a,a}}function Rn(t){return t&&(t.Ctor.options.name||t.tag)}function On(t,e){return Array.isArray(t)?t.indexOf(e)>-1:"string"==typeof t?t.split(",").indexOf(e)>-1:!!f(t)&&t.test(e)}function Nn(t,e){var n=t.cache,r=t.keys,o=t._vnode;for(var i in n){var a=n[i];if(a){var s=Rn(a.componentOptions);s&&!e(s)&&Ln(n,i,r,o)}}}function Ln(t,e,n,r){var o=t[e];!o||r&&o.tag===r.tag||o.componentInstance.$destroy(),t[e]=null,_(n,e)}!function(t){t.prototype._init=function(t){var e=this;e._uid=Cn++,e._isVue=!0,t&&t._isComponent?function(t,e){var n=t.$options=Object.create(t.constructor.options),r=e._parentVnode;n.parent=e.parent,n._parentVnode=r;var o=r.componentOptions;n.propsData=o.propsData,n._parentListeners=o.listeners,n._renderChildren=o.children,n._componentTag=o.tag,e.render&&(n.render=e.render,n.staticRenderFns=e.staticRenderFns)}(e,t):e.$options=Ut(An(e.constructor),t||{},e),e._renderProxy=e,e._self=e,function(t){var e=t.$options,n=e.parent;if(n&&!e.abstract){for(;n.$options.abstract&&n.$parent;)n=n.$parent;n.$children.push(t)}t.$parent=n,t.$root=n?n.$root:t,t.$children=[],t.$refs={},t._watcher=null,t._inactive=null,t._directInactive=!1,t._isMounted=!1,t._isDestroyed=!1,t._isBeingDestroyed=!1}(e),function(t){t._events=Object.create(null),t._hasHookEvent=!1;var e=t.$options._parentListeners;e&&Je(t,e)}(e),function(t){t._vnode=null,t._staticTrees=null;var e=t.$options,n=t.$vnode=e._parentVnode,o=n&&n.context;t.$slots=he(e._renderChildren,o),t.$scopedSlots=r,t._c=function(e,n,r,o){return qe(t,e,n,r,o,!1)},t.$createElement=function(e,n,r,o){return qe(t,e,n,r,o,!0)};var i=n&&n.data;Rt(t,"$attrs",i&&i.attrs||r,null,!0),Rt(t,"$listeners",e._parentListeners||r,null,!0)}(e),rn(e,"beforeCreate"),function(t){var e=de(t.$options.inject,t);e&&(At(!1),Object.keys(e).forEach(function(n){Rt(t,n,e[n])}),At(!0))}(e),_n(e),function(t){var e=t.$options.provide;e&&(t._provided="function"==typeof e?e.call(t):e)}(e),rn(e,"created"),e.$options.el&&e.$mount(e.$options.el)}}(Tn),function(t){var e={get:function(){return this._data}},n={get:function(){return this._props}};Object.defineProperty(t.prototype,"$data",e),Object.defineProperty(t.prototype,"$props",n),t.prototype.$set=Ot,t.prototype.$delete=Nt,t.prototype.$watch=function(t,e,n){if(l(e))return wn(this,t,e,n);(n=n||{}).user=!0;var r=new gn(this,t,e,n);if(n.immediate)try{e.call(this,r.value)}catch(t){Ht(t,this,'callback for immediate watcher "'+r.expression+'"')}return function(){r.teardown()}}}(Tn),function(t){var e=/^hook:/;t.prototype.$on=function(t,n){var r=this;if(Array.isArray(t))for(var o=0,i=t.length;o<i;o++)r.$on(t[o],n);else(r._events[t]||(r._events[t]=[])).push(n),e.test(t)&&(r._hasHookEvent=!0);return r},t.prototype.$once=function(t,e){var n=this;function r(){n.$off(t,r),e.apply(n,arguments)}return r.fn=e,n.$on(t,r),n},t.prototype.$off=function(t,e){var n=this;if(!arguments.length)return n._events=Object.create(null),n;if(Array.isArray(t)){for(var r=0,o=t.length;r<o;r++)n.$off(t[r],e);return n}var i,a=n._events[t];if(!a)return n;if(!e)return n._events[t]=null,n;for(var s=a.length;s--;)if((i=a[s])===e||i.fn===e){a.splice(s,1);break}return n},t.prototype.$emit=function(t){var e=this,n=e._events[t];if(n){n=n.length>1?R(n):n;for(var r=R(arguments,1),o='event handler for "'+t+'"',i=0,a=n.length;i<a;i++)Gt(n[i],e,r,e,o)}return e}}(Tn),function(t){t.prototype._update=function(t,e){var n=this,r=n.$el,o=n._vnode,i=tn(n);n._vnode=t,n.$el=o?n.__patch__(o,t):n.__patch__(n.$el,t,e,!1),i(),r&&(r.__vue__=null),n.$el&&(n.$el.__vue__=n),n.$vnode&&n.$parent&&n.$vnode===n.$parent._vnode&&(n.$parent.$el=n.$el)},t.prototype.$forceUpdate=function(){this._watcher&&this._watcher.update()},t.prototype.$destroy=function(){var t=this;if(!t._isBeingDestroyed){rn(t,"beforeDestroy"),t._isBeingDestroyed=!0;var e=t.$parent;!e||e._isBeingDestroyed||t.$options.abstract||_(e.$children,t),t._watcher&&t._watcher.teardown();for(var n=t._watchers.length;n--;)t._watchers[n].teardown();t._data.__ob__&&t._data.__ob__.vmCount--,t._isDestroyed=!0,t.__patch__(t._vnode,null),rn(t,"destroyed"),t.$off(),t.$el&&(t.$el.__vue__=null),t.$vnode&&(t.$vnode.parent=null)}}}(Tn),function(t){Ie(t.prototype),t.prototype.$nextTick=function(t){return re(t,this)},t.prototype._render=function(){var t,e=this,n=e.$options,r=n.render,o=n._parentVnode;o&&(e.$scopedSlots=ge(o.data.scopedSlots,e.$slots,e.$scopedSlots)),e.$vnode=o;try{Ge=e,t=r.call(e._renderProxy,e.$createElement)}catch(n){Ht(n,e,"render"),t=e._vnode}finally{Ge=null}return Array.isArray(t)&&1===t.length&&(t=t[0]),t instanceof vt||(t=_t()),t.parent=o,t}}(Tn);var In=[String,RegExp,Array],Dn={KeepAlive:{name:"keep-alive",abstract:!0,props:{include:In,exclude:In,max:[String,Number]},created:function(){this.cache=Object.create(null),this.keys=[]},destroyed:function(){for(var t in this.cache)Ln(this.cache,t,this.keys)},mounted:function(){var t=this;this.$watch("include",function(e){Nn(t,function(t){return On(e,t)})}),this.$watch("exclude",function(e){Nn(t,function(t){return!On(e,t)})})},render:function(){var t=this.$slots.default,e=Ye(t),n=e&&e.componentOptions;if(n){var r=Rn(n),o=this.include,i=this.exclude;if(o&&(!r||!On(o,r))||i&&r&&On(i,r))return e;var a=this.cache,s=this.keys,c=null==e.key?n.Ctor.cid+(n.tag?"::"+n.tag:""):e.key;a[c]?(e.componentInstance=a[c].componentInstance,_(s,c),s.push(c)):(a[c]=e,s.push(c),this.max&&s.length>parseInt(this.max)&&Ln(a,s[0],s,this._vnode)),e.data.keepAlive=!0}return e||t&&t[0]}}};!function(t){var e={get:function(){return B}};Object.defineProperty(t,"config",e),t.util={warn:ft,extend:O,mergeOptions:Ut,defineReactive:Rt},t.set=Ot,t.delete=Nt,t.nextTick=re,t.observable=function(t){return St(t),t},t.options=Object.create(null),F.forEach(function(e){t.options[e+"s"]=Object.create(null)}),t.options._base=t,O(t.options.components,Dn),function(t){t.use=function(t){var e=this._installedPlugins||(this._installedPlugins=[]);if(e.indexOf(t)>-1)return this;var n=R(arguments,1);return n.unshift(this),"function"==typeof t.install?t.install.apply(t,n):"function"==typeof t&&t.apply(null,n),e.push(t),this}}(t),function(t){t.mixin=function(t){return this.options=Ut(this.options,t),this}}(t),Sn(t),function(t){F.forEach(function(e){t[e]=function(t,n){return n?("component"===e&&l(n)&&(n.name=n.name||t,n=this.options._base.extend(n)),"directive"===e&&"function"==typeof n&&(n={bind:n,update:n}),this.options[e+"s"][t]=n,n):this.options[e+"s"][t]}})}(t)}(Tn),Object.defineProperty(Tn.prototype,"$isServer",{get:at}),Object.defineProperty(Tn.prototype,"$ssrContext",{get:function(){return this.$vnode&&this.$vnode.ssrContext}}),Object.defineProperty(Tn,"FunctionalRenderContext",{value:De}),Tn.version="2.6.10";var Mn=g("style,class"),Pn=g("input,textarea,option,select,progress"),jn=function(t,e,n){return"value"===n&&Pn(t)&&"button"!==e||"selected"===n&&"option"===t||"checked"===n&&"input"===t||"muted"===n&&"video"===t},Un=g("contenteditable,draggable,spellcheck"),Fn=g("events,caret,typing,plaintext-only"),$n=function(t,e){return Gn(e)||"false"===e?"false":"contenteditable"===t&&Fn(e)?e:"true"},Bn=g("allowfullscreen,async,autofocus,autoplay,checked,compact,controls,declare,default,defaultchecked,defaultmuted,defaultselected,defer,disabled,enabled,formnovalidate,hidden,indeterminate,inert,ismap,itemscope,loop,multiple,muted,nohref,noresize,noshade,novalidate,nowrap,open,pauseonexit,readonly,required,reversed,scoped,seamless,selected,sortable,translate,truespeed,typemustmatch,visible"),zn="http://www.w3.org/1999/xlink",qn=function(t){return":"===t.charAt(5)&&"xlink"===t.slice(0,5)},Hn=function(t){return qn(t)?t.slice(6,t.length):""},Gn=function(t){return null==t||!1===t};function Vn(t){for(var e=t.data,n=t,r=t;i(r.componentInstance);)(r=r.componentInstance._vnode)&&r.data&&(e=Wn(r.data,e));for(;i(n=n.parent);)n&&n.data&&(e=Wn(e,n.data));return function(t,e){if(i(t)||i(e))return Yn(t,Kn(e));return""}(e.staticClass,e.class)}function Wn(t,e){return{staticClass:Yn(t.staticClass,e.staticClass),class:i(t.class)?[t.class,e.class]:e.class}}function Yn(t,e){return t?e?t+" "+e:t:e||""}function Kn(t){return Array.isArray(t)?function(t){for(var e,n="",r=0,o=t.length;r<o;r++)i(e=Kn(t[r]))&&""!==e&&(n&&(n+=" "),n+=e);return n}(t):c(t)?function(t){var e="";for(var n in t)t[n]&&(e&&(e+=" "),e+=n);return e}(t):"string"==typeof t?t:""}var Xn={svg:"http://www.w3.org/2000/svg",math:"http://www.w3.org/1998/Math/MathML"},Zn=g("html,body,base,head,link,meta,style,title,address,article,aside,footer,header,h1,h2,h3,h4,h5,h6,hgroup,nav,section,div,dd,dl,dt,figcaption,figure,picture,hr,img,li,main,ol,p,pre,ul,a,b,abbr,bdi,bdo,br,cite,code,data,dfn,em,i,kbd,mark,q,rp,rt,rtc,ruby,s,samp,small,span,strong,sub,sup,time,u,var,wbr,area,audio,map,track,video,embed,object,param,source,canvas,script,noscript,del,ins,caption,col,colgroup,table,thead,tbody,td,th,tr,button,datalist,fieldset,form,input,label,legend,meter,optgroup,option,output,progress,select,textarea,details,dialog,menu,menuitem,summary,content,element,shadow,template,blockquote,iframe,tfoot"),Jn=g("svg,animate,circle,clippath,cursor,defs,desc,ellipse,filter,font-face,foreignObject,g,glyph,image,line,marker,mask,missing-glyph,path,pattern,polygon,polyline,rect,switch,symbol,text,textpath,tspan,use,view",!0),Qn=function(t){return Zn(t)||Jn(t)};function tr(t){return Jn(t)?"svg":"math"===t?"math":void 0}var er=Object.create(null);var nr=g("text,number,password,search,email,tel,url");function rr(t){if("string"==typeof t){var e=document.querySelector(t);return e||document.createElement("div")}return t}var or=Object.freeze({createElement:function(t,e){var n=document.createElement(t);return"select"!==t?n:(e.data&&e.data.attrs&&void 0!==e.data.attrs.multiple&&n.setAttribute("multiple","multiple"),n)},createElementNS:function(t,e){return document.createElementNS(Xn[t],e)},createTextNode:function(t){return document.createTextNode(t)},createComment:function(t){return document.createComment(t)},insertBefore:function(t,e,n){t.insertBefore(e,n)},removeChild:function(t,e){t.removeChild(e)},appendChild:function(t,e){t.appendChild(e)},parentNode:function(t){return t.parentNode},nextSibling:function(t){return t.nextSibling},tagName:function(t){return t.tagName},setTextContent:function(t,e){t.textContent=e},setStyleScope:function(t,e){t.setAttribute(e,"")}}),ir={create:function(t,e){ar(e)},update:function(t,e){t.data.ref!==e.data.ref&&(ar(t,!0),ar(e))},destroy:function(t){ar(t,!0)}};function ar(t,e){var n=t.data.ref;if(i(n)){var r=t.context,o=t.componentInstance||t.elm,a=r.$refs;e?Array.isArray(a[n])?_(a[n],o):a[n]===o&&(a[n]=void 0):t.data.refInFor?Array.isArray(a[n])?a[n].indexOf(o)<0&&a[n].push(o):a[n]=[o]:a[n]=o}}var sr=new vt("",{},[]),cr=["create","activate","update","remove","destroy"];function ur(t,e){return t.key===e.key&&(t.tag===e.tag&&t.isComment===e.isComment&&i(t.data)===i(e.data)&&function(t,e){if("input"!==t.tag)return!0;var n,r=i(n=t.data)&&i(n=n.attrs)&&n.type,o=i(n=e.data)&&i(n=n.attrs)&&n.type;return r===o||nr(r)&&nr(o)}(t,e)||a(t.isAsyncPlaceholder)&&t.asyncFactory===e.asyncFactory&&o(e.asyncFactory.error))}function lr(t,e,n){var r,o,a={};for(r=e;r<=n;++r)i(o=t[r].key)&&(a[o]=r);return a}var fr={create:pr,update:pr,destroy:function(t){pr(t,sr)}};function pr(t,e){(t.data.directives||e.data.directives)&&function(t,e){var n,r,o,i=t===sr,a=e===sr,s=hr(t.data.directives,t.context),c=hr(e.data.directives,e.context),u=[],l=[];for(n in c)r=s[n],o=c[n],r?(o.oldValue=r.value,o.oldArg=r.arg,gr(o,"update",e,t),o.def&&o.def.componentUpdated&&l.push(o)):(gr(o,"bind",e,t),o.def&&o.def.inserted&&u.push(o));if(u.length){var f=function(){for(var n=0;n<u.length;n++)gr(u[n],"inserted",e,t)};i?ue(e,"insert",f):f()}l.length&&ue(e,"postpatch",function(){for(var n=0;n<l.length;n++)gr(l[n],"componentUpdated",e,t)});if(!i)for(n in s)c[n]||gr(s[n],"unbind",t,t,a)}(t,e)}var dr=Object.create(null);function hr(t,e){var n,r,o=Object.create(null);if(!t)return o;for(n=0;n<t.length;n++)(r=t[n]).modifiers||(r.modifiers=dr),o[mr(r)]=r,r.def=Ft(e.$options,"directives",r.name);return o}function mr(t){return t.rawName||t.name+"."+Object.keys(t.modifiers||{}).join(".")}function gr(t,e,n,r,o){var i=t.def&&t.def[e];if(i)try{i(n.elm,t,n,r,o)}catch(r){Ht(r,n.context,"directive "+t.name+" "+e+" hook")}}var vr=[ir,fr];function br(t,e){var n=e.componentOptions;if(!(i(n)&&!1===n.Ctor.options.inheritAttrs||o(t.data.attrs)&&o(e.data.attrs))){var r,a,s=e.elm,c=t.data.attrs||{},u=e.data.attrs||{};for(r in i(u.__ob__)&&(u=e.data.attrs=O({},u)),u)a=u[r],c[r]!==a&&_r(s,r,a);for(r in(J||tt)&&u.value!==c.value&&_r(s,"value",u.value),c)o(u[r])&&(qn(r)?s.removeAttributeNS(zn,Hn(r)):Un(r)||s.removeAttribute(r))}}function _r(t,e,n){t.tagName.indexOf("-")>-1?yr(t,e,n):Bn(e)?Gn(n)?t.removeAttribute(e):(n="allowfullscreen"===e&&"EMBED"===t.tagName?"true":e,t.setAttribute(e,n)):Un(e)?t.setAttribute(e,$n(e,n)):qn(e)?Gn(n)?t.removeAttributeNS(zn,Hn(e)):t.setAttributeNS(zn,e,n):yr(t,e,n)}function yr(t,e,n){if(Gn(n))t.removeAttribute(e);else{if(J&&!Q&&"TEXTAREA"===t.tagName&&"placeholder"===e&&""!==n&&!t.__ieph){var r=function(e){e.stopImmediatePropagation(),t.removeEventListener("input",r)};t.addEventListener("input",r),t.__ieph=!0}t.setAttribute(e,n)}}var Er={create:br,update:br};function kr(t,e){var n=e.elm,r=e.data,a=t.data;if(!(o(r.staticClass)&&o(r.class)&&(o(a)||o(a.staticClass)&&o(a.class)))){var s=Vn(e),c=n._transitionClasses;i(c)&&(s=Yn(s,Kn(c))),s!==n._prevClass&&(n.setAttribute("class",s),n._prevClass=s)}}var xr,wr,Cr,Ar,Tr,Sr,Rr={create:kr,update:kr},Or=/[\w).+\-_$\]]/;function Nr(t){var e,n,r,o,i,a=!1,s=!1,c=!1,u=!1,l=0,f=0,p=0,d=0;for(r=0;r<t.length;r++)if(n=e,e=t.charCodeAt(r),a)39===e&&92!==n&&(a=!1);else if(s)34===e&&92!==n&&(s=!1);else if(c)96===e&&92!==n&&(c=!1);else if(u)47===e&&92!==n&&(u=!1);else if(124!==e||124===t.charCodeAt(r+1)||124===t.charCodeAt(r-1)||l||f||p){switch(e){case 34:s=!0;break;case 39:a=!0;break;case 96:c=!0;break;case 40:p++;break;case 41:p--;break;case 91:f++;break;case 93:f--;break;case 123:l++;break;case 125:l--}if(47===e){for(var h=r-1,m=void 0;h>=0&&" "===(m=t.charAt(h));h--);m&&Or.test(m)||(u=!0)}}else void 0===o?(d=r+1,o=t.slice(0,r).trim()):g();function g(){(i||(i=[])).push(t.slice(d,r).trim()),d=r+1}if(void 0===o?o=t.slice(0,r).trim():0!==d&&g(),i)for(r=0;r<i.length;r++)o=Lr(o,i[r]);return o}function Lr(t,e){var n=e.indexOf("(");if(n<0)return'_f("'+e+'")('+t+")";var r=e.slice(0,n),o=e.slice(n+1);return'_f("'+r+'")('+t+(")"!==o?","+o:o)}function Ir(t,e){console.error("[Vue compiler]: "+t)}function Dr(t,e){return t?t.map(function(t){return t[e]}).filter(function(t){return t}):[]}function Mr(t,e,n,r,o){(t.props||(t.props=[])).push(Hr({name:e,value:n,dynamic:o},r)),t.plain=!1}function Pr(t,e,n,r,o){(o?t.dynamicAttrs||(t.dynamicAttrs=[]):t.attrs||(t.attrs=[])).push(Hr({name:e,value:n,dynamic:o},r)),t.plain=!1}function jr(t,e,n,r){t.attrsMap[e]=n,t.attrsList.push(Hr({name:e,value:n},r))}function Ur(t,e,n,r,o,i,a,s){(t.directives||(t.directives=[])).push(Hr({name:e,rawName:n,value:r,arg:o,isDynamicArg:i,modifiers:a},s)),t.plain=!1}function Fr(t,e,n){return n?"_p("+e+',"'+t+'")':t+e}function $r(t,e,n,o,i,a,s,c){var u;(o=o||r).right?c?e="("+e+")==='click'?'contextmenu':("+e+")":"click"===e&&(e="contextmenu",delete o.right):o.middle&&(c?e="("+e+")==='click'?'mouseup':("+e+")":"click"===e&&(e="mouseup")),o.capture&&(delete o.capture,e=Fr("!",e,c)),o.once&&(delete o.once,e=Fr("~",e,c)),o.passive&&(delete o.passive,e=Fr("&",e,c)),o.native?(delete o.native,u=t.nativeEvents||(t.nativeEvents={})):u=t.events||(t.events={});var l=Hr({value:n.trim(),dynamic:c},s);o!==r&&(l.modifiers=o);var f=u[e];Array.isArray(f)?i?f.unshift(l):f.push(l):u[e]=f?i?[l,f]:[f,l]:l,t.plain=!1}function Br(t,e,n){var r=zr(t,":"+e)||zr(t,"v-bind:"+e);if(null!=r)return Nr(r);if(!1!==n){var o=zr(t,e);if(null!=o)return JSON.stringify(o)}}function zr(t,e,n){var r;if(null!=(r=t.attrsMap[e]))for(var o=t.attrsList,i=0,a=o.length;i<a;i++)if(o[i].name===e){o.splice(i,1);break}return n&&delete t.attrsMap[e],r}function qr(t,e){for(var n=t.attrsList,r=0,o=n.length;r<o;r++){var i=n[r];if(e.test(i.name))return n.splice(r,1),i}}function Hr(t,e){return e&&(null!=e.start&&(t.start=e.start),null!=e.end&&(t.end=e.end)),t}function Gr(t,e,n){var r=n||{},o=r.number,i="$$v";r.trim&&(i="(typeof $$v === 'string'? $$v.trim(): $$v)"),o&&(i="_n("+i+")");var a=Vr(e,i);t.model={value:"("+e+")",expression:JSON.stringify(e),callback:"function ($$v) {"+a+"}"}}function Vr(t,e){var n=function(t){if(t=t.trim(),xr=t.length,t.indexOf("[")<0||t.lastIndexOf("]")<xr-1)return(Ar=t.lastIndexOf("."))>-1?{exp:t.slice(0,Ar),key:'"'+t.slice(Ar+1)+'"'}:{exp:t,key:null};wr=t,Ar=Tr=Sr=0;for(;!Yr();)Kr(Cr=Wr())?Zr(Cr):91===Cr&&Xr(Cr);return{exp:t.slice(0,Tr),key:t.slice(Tr+1,Sr)}}(t);return null===n.key?t+"="+e:"$set("+n.exp+", "+n.key+", "+e+")"}function Wr(){return wr.charCodeAt(++Ar)}function Yr(){return Ar>=xr}function Kr(t){return 34===t||39===t}function Xr(t){var e=1;for(Tr=Ar;!Yr();)if(Kr(t=Wr()))Zr(t);else if(91===t&&e++,93===t&&e--,0===e){Sr=Ar;break}}function Zr(t){for(var e=t;!Yr()&&(t=Wr())!==e;);}var Jr,Qr="__r",to="__c";function eo(t,e,n){var r=Jr;return function o(){var i=e.apply(null,arguments);null!==i&&oo(t,o,n,r)}}var no=Kt&&!(nt&&Number(nt[1])<=53);function ro(t,e,n,r){if(no){var o=fn,i=e;e=i._wrapper=function(t){if(t.target===t.currentTarget||t.timeStamp>=o||t.timeStamp<=0||t.target.ownerDocument!==document)return i.apply(this,arguments)}}Jr.addEventListener(t,e,ot?{capture:n,passive:r}:n)}function oo(t,e,n,r){(r||Jr).removeEventListener(t,e._wrapper||e,n)}function io(t,e){if(!o(t.data.on)||!o(e.data.on)){var n=e.data.on||{},r=t.data.on||{};Jr=e.elm,function(t){if(i(t[Qr])){var e=J?"change":"input";t[e]=[].concat(t[Qr],t[e]||[]),delete t[Qr]}i(t[to])&&(t.change=[].concat(t[to],t.change||[]),delete t[to])}(n),ce(n,r,ro,oo,eo,e.context),Jr=void 0}}var ao,so={create:io,update:io};function co(t,e){if(!o(t.data.domProps)||!o(e.data.domProps)){var n,r,a=e.elm,s=t.data.domProps||{},c=e.data.domProps||{};for(n in i(c.__ob__)&&(c=e.data.domProps=O({},c)),s)n in c||(a[n]="");for(n in c){if(r=c[n],"textContent"===n||"innerHTML"===n){if(e.children&&(e.children.length=0),r===s[n])continue;1===a.childNodes.length&&a.removeChild(a.childNodes[0])}if("value"===n&&"PROGRESS"!==a.tagName){a._value=r;var u=o(r)?"":String(r);uo(a,u)&&(a.value=u)}else if("innerHTML"===n&&Jn(a.tagName)&&o(a.innerHTML)){(ao=ao||document.createElement("div")).innerHTML="<svg>"+r+"</svg>";for(var l=ao.firstChild;a.firstChild;)a.removeChild(a.firstChild);for(;l.firstChild;)a.appendChild(l.firstChild)}else if(r!==s[n])try{a[n]=r}catch(t){}}}}function uo(t,e){return!t.composing&&("OPTION"===t.tagName||function(t,e){var n=!0;try{n=document.activeElement!==t}catch(t){}return n&&t.value!==e}(t,e)||function(t,e){var n=t.value,r=t._vModifiers;if(i(r)){if(r.number)return m(n)!==m(e);if(r.trim)return n.trim()!==e.trim()}return n!==e}(t,e))}var lo={create:co,update:co},fo=k(function(t){var e={},n=/:(.+)/;return t.split(/;(?![^(]*\))/g).forEach(function(t){if(t){var r=t.split(n);r.length>1&&(e[r[0].trim()]=r[1].trim())}}),e});function po(t){var e=ho(t.style);return t.staticStyle?O(t.staticStyle,e):e}function ho(t){return Array.isArray(t)?N(t):"string"==typeof t?fo(t):t}var mo,go=/^--/,vo=/\s*!important$/,bo=function(t,e,n){if(go.test(e))t.style.setProperty(e,n);else if(vo.test(n))t.style.setProperty(T(e),n.replace(vo,""),"important");else{var r=yo(e);if(Array.isArray(n))for(var o=0,i=n.length;o<i;o++)t.style[r]=n[o];else t.style[r]=n}},_o=["Webkit","Moz","ms"],yo=k(function(t){if(mo=mo||document.createElement("div").style,"filter"!==(t=w(t))&&t in mo)return t;for(var e=t.charAt(0).toUpperCase()+t.slice(1),n=0;n<_o.length;n++){var r=_o[n]+e;if(r in mo)return r}});function Eo(t,e){var n=e.data,r=t.data;if(!(o(n.staticStyle)&&o(n.style)&&o(r.staticStyle)&&o(r.style))){var a,s,c=e.elm,u=r.staticStyle,l=r.normalizedStyle||r.style||{},f=u||l,p=ho(e.data.style)||{};e.data.normalizedStyle=i(p.__ob__)?O({},p):p;var d=function(t,e){var n,r={};if(e)for(var o=t;o.componentInstance;)(o=o.componentInstance._vnode)&&o.data&&(n=po(o.data))&&O(r,n);(n=po(t.data))&&O(r,n);for(var i=t;i=i.parent;)i.data&&(n=po(i.data))&&O(r,n);return r}(e,!0);for(s in f)o(d[s])&&bo(c,s,"");for(s in d)(a=d[s])!==f[s]&&bo(c,s,null==a?"":a)}}var ko={create:Eo,update:Eo},xo=/\s+/;function wo(t,e){if(e&&(e=e.trim()))if(t.classList)e.indexOf(" ")>-1?e.split(xo).forEach(function(e){return t.classList.add(e)}):t.classList.add(e);else{var n=" "+(t.getAttribute("class")||"")+" ";n.indexOf(" "+e+" ")<0&&t.setAttribute("class",(n+e).trim())}}function Co(t,e){if(e&&(e=e.trim()))if(t.classList)e.indexOf(" ")>-1?e.split(xo).forEach(function(e){return t.classList.remove(e)}):t.classList.remove(e),t.classList.length||t.removeAttribute("class");else{for(var n=" "+(t.getAttribute("class")||"")+" ",r=" "+e+" ";n.indexOf(r)>=0;)n=n.replace(r," ");(n=n.trim())?t.setAttribute("class",n):t.removeAttribute("class")}}function Ao(t){if(t){if("object"==typeof t){var e={};return!1!==t.css&&O(e,To(t.name||"v")),O(e,t),e}return"string"==typeof t?To(t):void 0}}var To=k(function(t){return{enterClass:t+"-enter",enterToClass:t+"-enter-to",enterActiveClass:t+"-enter-active",leaveClass:t+"-leave",leaveToClass:t+"-leave-to",leaveActiveClass:t+"-leave-active"}}),So=Y&&!Q,Ro="transition",Oo="animation",No="transition",Lo="transitionend",Io="animation",Do="animationend";So&&(void 0===window.ontransitionend&&void 0!==window.onwebkittransitionend&&(No="WebkitTransition",Lo="webkitTransitionEnd"),void 0===window.onanimationend&&void 0!==window.onwebkitanimationend&&(Io="WebkitAnimation",Do="webkitAnimationEnd"));var Mo=Y?window.requestAnimationFrame?window.requestAnimationFrame.bind(window):setTimeout:function(t){return t()};function Po(t){Mo(function(){Mo(t)})}function jo(t,e){var n=t._transitionClasses||(t._transitionClasses=[]);n.indexOf(e)<0&&(n.push(e),wo(t,e))}function Uo(t,e){t._transitionClasses&&_(t._transitionClasses,e),Co(t,e)}function Fo(t,e,n){var r=Bo(t,e),o=r.type,i=r.timeout,a=r.propCount;if(!o)return n();var s=o===Ro?Lo:Do,c=0,u=function(){t.removeEventListener(s,l),n()},l=function(e){e.target===t&&++c>=a&&u()};setTimeout(function(){c<a&&u()},i+1),t.addEventListener(s,l)}var $o=/\b(transform|all)(,|$)/;function Bo(t,e){var n,r=window.getComputedStyle(t),o=(r[No+"Delay"]||"").split(", "),i=(r[No+"Duration"]||"").split(", "),a=zo(o,i),s=(r[Io+"Delay"]||"").split(", "),c=(r[Io+"Duration"]||"").split(", "),u=zo(s,c),l=0,f=0;return e===Ro?a>0&&(n=Ro,l=a,f=i.length):e===Oo?u>0&&(n=Oo,l=u,f=c.length):f=(n=(l=Math.max(a,u))>0?a>u?Ro:Oo:null)?n===Ro?i.length:c.length:0,{type:n,timeout:l,propCount:f,hasTransform:n===Ro&&$o.test(r[No+"Property"])}}function zo(t,e){for(;t.length<e.length;)t=t.concat(t);return Math.max.apply(null,e.map(function(e,n){return qo(e)+qo(t[n])}))}function qo(t){return 1e3*Number(t.slice(0,-1).replace(",","."))}function Ho(t,e){var n=t.elm;i(n._leaveCb)&&(n._leaveCb.cancelled=!0,n._leaveCb());var r=Ao(t.data.transition);if(!o(r)&&!i(n._enterCb)&&1===n.nodeType){for(var a=r.css,s=r.type,u=r.enterClass,l=r.enterToClass,f=r.enterActiveClass,p=r.appearClass,d=r.appearToClass,h=r.appearActiveClass,g=r.beforeEnter,v=r.enter,b=r.afterEnter,_=r.enterCancelled,y=r.beforeAppear,E=r.appear,k=r.afterAppear,x=r.appearCancelled,w=r.duration,C=Qe,A=Qe.$vnode;A&&A.parent;)C=A.context,A=A.parent;var T=!C._isMounted||!t.isRootInsert;if(!T||E||""===E){var S=T&&p?p:u,R=T&&h?h:f,O=T&&d?d:l,N=T&&y||g,L=T&&"function"==typeof E?E:v,I=T&&k||b,D=T&&x||_,M=m(c(w)?w.enter:w);0;var P=!1!==a&&!Q,U=Wo(L),F=n._enterCb=j(function(){P&&(Uo(n,O),Uo(n,R)),F.cancelled?(P&&Uo(n,S),D&&D(n)):I&&I(n),n._enterCb=null});t.data.show||ue(t,"insert",function(){var e=n.parentNode,r=e&&e._pending&&e._pending[t.key];r&&r.tag===t.tag&&r.elm._leaveCb&&r.elm._leaveCb(),L&&L(n,F)}),N&&N(n),P&&(jo(n,S),jo(n,R),Po(function(){Uo(n,S),F.cancelled||(jo(n,O),U||(Vo(M)?setTimeout(F,M):Fo(n,s,F)))})),t.data.show&&(e&&e(),L&&L(n,F)),P||U||F()}}}function Go(t,e){var n=t.elm;i(n._enterCb)&&(n._enterCb.cancelled=!0,n._enterCb());var r=Ao(t.data.transition);if(o(r)||1!==n.nodeType)return e();if(!i(n._leaveCb)){var a=r.css,s=r.type,u=r.leaveClass,l=r.leaveToClass,f=r.leaveActiveClass,p=r.beforeLeave,d=r.leave,h=r.afterLeave,g=r.leaveCancelled,v=r.delayLeave,b=r.duration,_=!1!==a&&!Q,y=Wo(d),E=m(c(b)?b.leave:b);0;var k=n._leaveCb=j(function(){n.parentNode&&n.parentNode._pending&&(n.parentNode._pending[t.key]=null),_&&(Uo(n,l),Uo(n,f)),k.cancelled?(_&&Uo(n,u),g&&g(n)):(e(),h&&h(n)),n._leaveCb=null});v?v(x):x()}function x(){k.cancelled||(!t.data.show&&n.parentNode&&((n.parentNode._pending||(n.parentNode._pending={}))[t.key]=t),p&&p(n),_&&(jo(n,u),jo(n,f),Po(function(){Uo(n,u),k.cancelled||(jo(n,l),y||(Vo(E)?setTimeout(k,E):Fo(n,s,k)))})),d&&d(n,k),_||y||k())}}function Vo(t){return"number"==typeof t&&!isNaN(t)}function Wo(t){if(o(t))return!1;var e=t.fns;return i(e)?Wo(Array.isArray(e)?e[0]:e):(t._length||t.length)>1}function Yo(t,e){!0!==e.data.show&&Ho(e)}var Ko=function(t){var e,n,r={},c=t.modules,u=t.nodeOps;for(e=0;e<cr.length;++e)for(r[cr[e]]=[],n=0;n<c.length;++n)i(c[n][cr[e]])&&r[cr[e]].push(c[n][cr[e]]);function l(t){var e=u.parentNode(t);i(e)&&u.removeChild(e,t)}function f(t,e,n,o,s,c,l){if(i(t.elm)&&i(c)&&(t=c[l]=Et(t)),t.isRootInsert=!s,!function(t,e,n,o){var s=t.data;if(i(s)){var c=i(t.componentInstance)&&s.keepAlive;if(i(s=s.hook)&&i(s=s.init)&&s(t,!1),i(t.componentInstance))return p(t,e),d(n,t.elm,o),a(c)&&function(t,e,n,o){for(var a,s=t;s.componentInstance;)if(s=s.componentInstance._vnode,i(a=s.data)&&i(a=a.transition)){for(a=0;a<r.activate.length;++a)r.activate[a](sr,s);e.push(s);break}d(n,t.elm,o)}(t,e,n,o),!0}}(t,e,n,o)){var f=t.data,m=t.children,g=t.tag;i(g)?(t.elm=t.ns?u.createElementNS(t.ns,g):u.createElement(g,t),b(t),h(t,m,e),i(f)&&v(t,e),d(n,t.elm,o)):a(t.isComment)?(t.elm=u.createComment(t.text),d(n,t.elm,o)):(t.elm=u.createTextNode(t.text),d(n,t.elm,o))}}function p(t,e){i(t.data.pendingInsert)&&(e.push.apply(e,t.data.pendingInsert),t.data.pendingInsert=null),t.elm=t.componentInstance.$el,m(t)?(v(t,e),b(t)):(ar(t),e.push(t))}function d(t,e,n){i(t)&&(i(n)?u.parentNode(n)===t&&u.insertBefore(t,e,n):u.appendChild(t,e))}function h(t,e,n){if(Array.isArray(e))for(var r=0;r<e.length;++r)f(e[r],n,t.elm,null,!0,e,r);else s(t.text)&&u.appendChild(t.elm,u.createTextNode(String(t.text)))}function m(t){for(;t.componentInstance;)t=t.componentInstance._vnode;return i(t.tag)}function v(t,n){for(var o=0;o<r.create.length;++o)r.create[o](sr,t);i(e=t.data.hook)&&(i(e.create)&&e.create(sr,t),i(e.insert)&&n.push(t))}function b(t){var e;if(i(e=t.fnScopeId))u.setStyleScope(t.elm,e);else for(var n=t;n;)i(e=n.context)&&i(e=e.$options._scopeId)&&u.setStyleScope(t.elm,e),n=n.parent;i(e=Qe)&&e!==t.context&&e!==t.fnContext&&i(e=e.$options._scopeId)&&u.setStyleScope(t.elm,e)}function _(t,e,n,r,o,i){for(;r<=o;++r)f(n[r],i,t,e,!1,n,r)}function y(t){var e,n,o=t.data;if(i(o))for(i(e=o.hook)&&i(e=e.destroy)&&e(t),e=0;e<r.destroy.length;++e)r.destroy[e](t);if(i(e=t.children))for(n=0;n<t.children.length;++n)y(t.children[n])}function E(t,e,n,r){for(;n<=r;++n){var o=e[n];i(o)&&(i(o.tag)?(k(o),y(o)):l(o.elm))}}function k(t,e){if(i(e)||i(t.data)){var n,o=r.remove.length+1;for(i(e)?e.listeners+=o:e=function(t,e){function n(){0==--n.listeners&&l(t)}return n.listeners=e,n}(t.elm,o),i(n=t.componentInstance)&&i(n=n._vnode)&&i(n.data)&&k(n,e),n=0;n<r.remove.length;++n)r.remove[n](t,e);i(n=t.data.hook)&&i(n=n.remove)?n(t,e):e()}else l(t.elm)}function x(t,e,n,r){for(var o=n;o<r;o++){var a=e[o];if(i(a)&&ur(t,a))return o}}function w(t,e,n,s,c,l){if(t!==e){i(e.elm)&&i(s)&&(e=s[c]=Et(e));var p=e.elm=t.elm;if(a(t.isAsyncPlaceholder))i(e.asyncFactory.resolved)?T(t.elm,e,n):e.isAsyncPlaceholder=!0;else if(a(e.isStatic)&&a(t.isStatic)&&e.key===t.key&&(a(e.isCloned)||a(e.isOnce)))e.componentInstance=t.componentInstance;else{var d,h=e.data;i(h)&&i(d=h.hook)&&i(d=d.prepatch)&&d(t,e);var g=t.children,v=e.children;if(i(h)&&m(e)){for(d=0;d<r.update.length;++d)r.update[d](t,e);i(d=h.hook)&&i(d=d.update)&&d(t,e)}o(e.text)?i(g)&&i(v)?g!==v&&function(t,e,n,r,a){for(var s,c,l,p=0,d=0,h=e.length-1,m=e[0],g=e[h],v=n.length-1,b=n[0],y=n[v],k=!a;p<=h&&d<=v;)o(m)?m=e[++p]:o(g)?g=e[--h]:ur(m,b)?(w(m,b,r,n,d),m=e[++p],b=n[++d]):ur(g,y)?(w(g,y,r,n,v),g=e[--h],y=n[--v]):ur(m,y)?(w(m,y,r,n,v),k&&u.insertBefore(t,m.elm,u.nextSibling(g.elm)),m=e[++p],y=n[--v]):ur(g,b)?(w(g,b,r,n,d),k&&u.insertBefore(t,g.elm,m.elm),g=e[--h],b=n[++d]):(o(s)&&(s=lr(e,p,h)),o(c=i(b.key)?s[b.key]:x(b,e,p,h))?f(b,r,t,m.elm,!1,n,d):ur(l=e[c],b)?(w(l,b,r,n,d),e[c]=void 0,k&&u.insertBefore(t,l.elm,m.elm)):f(b,r,t,m.elm,!1,n,d),b=n[++d]);p>h?_(t,o(n[v+1])?null:n[v+1].elm,n,d,v,r):d>v&&E(0,e,p,h)}(p,g,v,n,l):i(v)?(i(t.text)&&u.setTextContent(p,""),_(p,null,v,0,v.length-1,n)):i(g)?E(0,g,0,g.length-1):i(t.text)&&u.setTextContent(p,""):t.text!==e.text&&u.setTextContent(p,e.text),i(h)&&i(d=h.hook)&&i(d=d.postpatch)&&d(t,e)}}}function C(t,e,n){if(a(n)&&i(t.parent))t.parent.data.pendingInsert=e;else for(var r=0;r<e.length;++r)e[r].data.hook.insert(e[r])}var A=g("attrs,class,staticClass,staticStyle,key");function T(t,e,n,r){var o,s=e.tag,c=e.data,u=e.children;if(r=r||c&&c.pre,e.elm=t,a(e.isComment)&&i(e.asyncFactory))return e.isAsyncPlaceholder=!0,!0;if(i(c)&&(i(o=c.hook)&&i(o=o.init)&&o(e,!0),i(o=e.componentInstance)))return p(e,n),!0;if(i(s)){if(i(u))if(t.hasChildNodes())if(i(o=c)&&i(o=o.domProps)&&i(o=o.innerHTML)){if(o!==t.innerHTML)return!1}else{for(var l=!0,f=t.firstChild,d=0;d<u.length;d++){if(!f||!T(f,u[d],n,r)){l=!1;break}f=f.nextSibling}if(!l||f)return!1}else h(e,u,n);if(i(c)){var m=!1;for(var g in c)if(!A(g)){m=!0,v(e,n);break}!m&&c.class&&ie(c.class)}}else t.data!==e.text&&(t.data=e.text);return!0}return function(t,e,n,s){if(!o(e)){var c,l=!1,p=[];if(o(t))l=!0,f(e,p);else{var d=i(t.nodeType);if(!d&&ur(t,e))w(t,e,p,null,null,s);else{if(d){if(1===t.nodeType&&t.hasAttribute(U)&&(t.removeAttribute(U),n=!0),a(n)&&T(t,e,p))return C(e,p,!0),t;c=t,t=new vt(u.tagName(c).toLowerCase(),{},[],void 0,c)}var h=t.elm,g=u.parentNode(h);if(f(e,p,h._leaveCb?null:g,u.nextSibling(h)),i(e.parent))for(var v=e.parent,b=m(e);v;){for(var _=0;_<r.destroy.length;++_)r.destroy[_](v);if(v.elm=e.elm,b){for(var k=0;k<r.create.length;++k)r.create[k](sr,v);var x=v.data.hook.insert;if(x.merged)for(var A=1;A<x.fns.length;A++)x.fns[A]()}else ar(v);v=v.parent}i(g)?E(0,[t],0,0):i(t.tag)&&y(t)}}return C(e,p,l),e.elm}i(t)&&y(t)}}({nodeOps:or,modules:[Er,Rr,so,lo,ko,Y?{create:Yo,activate:Yo,remove:function(t,e){!0!==t.data.show?Go(t,e):e()}}:{}].concat(vr)});Q&&document.addEventListener("selectionchange",function(){var t=document.activeElement;t&&t.vmodel&&ri(t,"input")});var Xo={inserted:function(t,e,n,r){"select"===n.tag?(r.elm&&!r.elm._vOptions?ue(n,"postpatch",function(){Xo.componentUpdated(t,e,n)}):Zo(t,e,n.context),t._vOptions=[].map.call(t.options,ti)):("textarea"===n.tag||nr(t.type))&&(t._vModifiers=e.modifiers,e.modifiers.lazy||(t.addEventListener("compositionstart",ei),t.addEventListener("compositionend",ni),t.addEventListener("change",ni),Q&&(t.vmodel=!0)))},componentUpdated:function(t,e,n){if("select"===n.tag){Zo(t,e,n.context);var r=t._vOptions,o=t._vOptions=[].map.call(t.options,ti);if(o.some(function(t,e){return!M(t,r[e])}))(t.multiple?e.value.some(function(t){return Qo(t,o)}):e.value!==e.oldValue&&Qo(e.value,o))&&ri(t,"change")}}};function Zo(t,e,n){Jo(t,e,n),(J||tt)&&setTimeout(function(){Jo(t,e,n)},0)}function Jo(t,e,n){var r=e.value,o=t.multiple;if(!o||Array.isArray(r)){for(var i,a,s=0,c=t.options.length;s<c;s++)if(a=t.options[s],o)i=P(r,ti(a))>-1,a.selected!==i&&(a.selected=i);else if(M(ti(a),r))return void(t.selectedIndex!==s&&(t.selectedIndex=s));o||(t.selectedIndex=-1)}}function Qo(t,e){return e.every(function(e){return!M(e,t)})}function ti(t){return"_value"in t?t._value:t.value}function ei(t){t.target.composing=!0}function ni(t){t.target.composing&&(t.target.composing=!1,ri(t.target,"input"))}function ri(t,e){var n=document.createEvent("HTMLEvents");n.initEvent(e,!0,!0),t.dispatchEvent(n)}function oi(t){return!t.componentInstance||t.data&&t.data.transition?t:oi(t.componentInstance._vnode)}var ii={model:Xo,show:{bind:function(t,e,n){var r=e.value,o=(n=oi(n)).data&&n.data.transition,i=t.__vOriginalDisplay="none"===t.style.display?"":t.style.display;r&&o?(n.data.show=!0,Ho(n,function(){t.style.display=i})):t.style.display=r?i:"none"},update:function(t,e,n){var r=e.value;!r!=!e.oldValue&&((n=oi(n)).data&&n.data.transition?(n.data.show=!0,r?Ho(n,function(){t.style.display=t.__vOriginalDisplay}):Go(n,function(){t.style.display="none"})):t.style.display=r?t.__vOriginalDisplay:"none")},unbind:function(t,e,n,r,o){o||(t.style.display=t.__vOriginalDisplay)}}},ai={name:String,appear:Boolean,css:Boolean,mode:String,type:String,enterClass:String,leaveClass:String,enterToClass:String,leaveToClass:String,enterActiveClass:String,leaveActiveClass:String,appearClass:String,appearActiveClass:String,appearToClass:String,duration:[Number,String,Object]};function si(t){var e=t&&t.componentOptions;return e&&e.Ctor.options.abstract?si(Ye(e.children)):t}function ci(t){var e={},n=t.$options;for(var r in n.propsData)e[r]=t[r];var o=n._parentListeners;for(var i in o)e[w(i)]=o[i];return e}function ui(t,e){if(/\d-keep-alive$/.test(e.tag))return t("keep-alive",{props:e.componentOptions.propsData})}var li=function(t){return t.tag||We(t)},fi=function(t){return"show"===t.name},pi={name:"transition",props:ai,abstract:!0,render:function(t){var e=this,n=this.$slots.default;if(n&&(n=n.filter(li)).length){0;var r=this.mode;0;var o=n[0];if(function(t){for(;t=t.parent;)if(t.data.transition)return!0}(this.$vnode))return o;var i=si(o);if(!i)return o;if(this._leaving)return ui(t,o);var a="__transition-"+this._uid+"-";i.key=null==i.key?i.isComment?a+"comment":a+i.tag:s(i.key)?0===String(i.key).indexOf(a)?i.key:a+i.key:i.key;var c=(i.data||(i.data={})).transition=ci(this),u=this._vnode,l=si(u);if(i.data.directives&&i.data.directives.some(fi)&&(i.data.show=!0),l&&l.data&&!function(t,e){return e.key===t.key&&e.tag===t.tag}(i,l)&&!We(l)&&(!l.componentInstance||!l.componentInstance._vnode.isComment)){var f=l.data.transition=O({},c);if("out-in"===r)return this._leaving=!0,ue(f,"afterLeave",function(){e._leaving=!1,e.$forceUpdate()}),ui(t,o);if("in-out"===r){if(We(i))return u;var p,d=function(){p()};ue(c,"afterEnter",d),ue(c,"enterCancelled",d),ue(f,"delayLeave",function(t){p=t})}}return o}}},di=O({tag:String,moveClass:String},ai);function hi(t){t.elm._moveCb&&t.elm._moveCb(),t.elm._enterCb&&t.elm._enterCb()}function mi(t){t.data.newPos=t.elm.getBoundingClientRect()}function gi(t){var e=t.data.pos,n=t.data.newPos,r=e.left-n.left,o=e.top-n.top;if(r||o){t.data.moved=!0;var i=t.elm.style;i.transform=i.WebkitTransform="translate("+r+"px,"+o+"px)",i.transitionDuration="0s"}}delete di.mode;var vi={Transition:pi,TransitionGroup:{props:di,beforeMount:function(){var t=this,e=this._update;this._update=function(n,r){var o=tn(t);t.__patch__(t._vnode,t.kept,!1,!0),t._vnode=t.kept,o(),e.call(t,n,r)}},render:function(t){for(var e=this.tag||this.$vnode.data.tag||"span",n=Object.create(null),r=this.prevChildren=this.children,o=this.$slots.default||[],i=this.children=[],a=ci(this),s=0;s<o.length;s++){var c=o[s];if(c.tag)if(null!=c.key&&0!==String(c.key).indexOf("__vlist"))i.push(c),n[c.key]=c,(c.data||(c.data={})).transition=a;else;}if(r){for(var u=[],l=[],f=0;f<r.length;f++){var p=r[f];p.data.transition=a,p.data.pos=p.elm.getBoundingClientRect(),n[p.key]?u.push(p):l.push(p)}this.kept=t(e,null,u),this.removed=l}return t(e,null,i)},updated:function(){var t=this.prevChildren,e=this.moveClass||(this.name||"v")+"-move";t.length&&this.hasMove(t[0].elm,e)&&(t.forEach(hi),t.forEach(mi),t.forEach(gi),this._reflow=document.body.offsetHeight,t.forEach(function(t){if(t.data.moved){var n=t.elm,r=n.style;jo(n,e),r.transform=r.WebkitTransform=r.transitionDuration="",n.addEventListener(Lo,n._moveCb=function t(r){r&&r.target!==n||r&&!/transform$/.test(r.propertyName)||(n.removeEventListener(Lo,t),n._moveCb=null,Uo(n,e))})}}))},methods:{hasMove:function(t,e){if(!So)return!1;if(this._hasMove)return this._hasMove;var n=t.cloneNode();t._transitionClasses&&t._transitionClasses.forEach(function(t){Co(n,t)}),wo(n,e),n.style.display="none",this.$el.appendChild(n);var r=Bo(n);return this.$el.removeChild(n),this._hasMove=r.hasTransform}}}};Tn.config.mustUseProp=jn,Tn.config.isReservedTag=Qn,Tn.config.isReservedAttr=Mn,Tn.config.getTagNamespace=tr,Tn.config.isUnknownElement=function(t){if(!Y)return!0;if(Qn(t))return!1;if(t=t.toLowerCase(),null!=er[t])return er[t];var e=document.createElement(t);return t.indexOf("-")>-1?er[t]=e.constructor===window.HTMLUnknownElement||e.constructor===window.HTMLElement:er[t]=/HTMLUnknownElement/.test(e.toString())},O(Tn.options.directives,ii),O(Tn.options.components,vi),Tn.prototype.__patch__=Y?Ko:L,Tn.prototype.$mount=function(t,e){return function(t,e,n){var r;return t.$el=e,t.$options.render||(t.$options.render=_t),rn(t,"beforeMount"),r=function(){t._update(t._render(),n)},new gn(t,r,L,{before:function(){t._isMounted&&!t._isDestroyed&&rn(t,"beforeUpdate")}},!0),n=!1,null==t.$vnode&&(t._isMounted=!0,rn(t,"mounted")),t}(this,t=t&&Y?rr(t):void 0,e)},Y&&setTimeout(function(){B.devtools&&st&&st.emit("init",Tn)},0);var bi=/\{\{((?:.|\r?\n)+?)\}\}/g,_i=/[-.*+?^${}()|[\]\/\\]/g,yi=k(function(t){var e=t[0].replace(_i,"\\$&"),n=t[1].replace(_i,"\\$&");return new RegExp(e+"((?:.|\\n)+?)"+n,"g")});var Ei={staticKeys:["staticClass"],transformNode:function(t,e){e.warn;var n=zr(t,"class");n&&(t.staticClass=JSON.stringify(n));var r=Br(t,"class",!1);r&&(t.classBinding=r)},genData:function(t){var e="";return t.staticClass&&(e+="staticClass:"+t.staticClass+","),t.classBinding&&(e+="class:"+t.classBinding+","),e}};var ki,xi={staticKeys:["staticStyle"],transformNode:function(t,e){e.warn;var n=zr(t,"style");n&&(t.staticStyle=JSON.stringify(fo(n)));var r=Br(t,"style",!1);r&&(t.styleBinding=r)},genData:function(t){var e="";return t.staticStyle&&(e+="staticStyle:"+t.staticStyle+","),t.styleBinding&&(e+="style:("+t.styleBinding+"),"),e}},wi=function(t){return(ki=ki||document.createElement("div")).innerHTML=t,ki.textContent},Ci=g("area,base,br,col,embed,frame,hr,img,input,isindex,keygen,link,meta,param,source,track,wbr"),Ai=g("colgroup,dd,dt,li,options,p,td,tfoot,th,thead,tr,source"),Ti=g("address,article,aside,base,blockquote,body,caption,col,colgroup,dd,details,dialog,div,dl,dt,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,head,header,hgroup,hr,html,legend,li,menuitem,meta,optgroup,option,param,rp,rt,source,style,summary,tbody,td,tfoot,th,thead,title,tr,track"),Si=/^\s*([^\s"'<>\/=]+)(?:\s*(=)\s*(?:"([^"]*)"+|'([^']*)'+|([^\s"'=<>`]+)))?/,Ri=/^\s*((?:v-[\w-]+:|@|:|#)\[[^=]+\][^\s"'<>\/=]*)(?:\s*(=)\s*(?:"([^"]*)"+|'([^']*)'+|([^\s"'=<>`]+)))?/,Oi="[a-zA-Z_][\\-\\.0-9_a-zA-Z"+z.source+"]*",Ni="((?:"+Oi+"\\:)?"+Oi+")",Li=new RegExp("^<"+Ni),Ii=/^\s*(\/?)>/,Di=new RegExp("^<\\/"+Ni+"[^>]*>"),Mi=/^<!DOCTYPE [^>]+>/i,Pi=/^<!\--/,ji=/^<!\[/,Ui=g("script,style,textarea",!0),Fi={},$i={"&lt;":"<","&gt;":">","&quot;":'"',"&amp;":"&","&#10;":"\n","&#9;":"\t","&#39;":"'"},Bi=/&(?:lt|gt|quot|amp|#39);/g,zi=/&(?:lt|gt|quot|amp|#39|#10|#9);/g,qi=g("pre,textarea",!0),Hi=function(t,e){return t&&qi(t)&&"\n"===e[0]};function Gi(t,e){var n=e?zi:Bi;return t.replace(n,function(t){return $i[t]})}var Vi,Wi,Yi,Ki,Xi,Zi,Ji,Qi,ta=/^@|^v-on:/,ea=/^v-|^@|^:/,na=/([\s\S]*?)\s+(?:in|of)\s+([\s\S]*)/,ra=/,([^,\}\]]*)(?:,([^,\}\]]*))?$/,oa=/^\(|\)$/g,ia=/^\[.*\]$/,aa=/:(.*)$/,sa=/^:|^\.|^v-bind:/,ca=/\.[^.\]]+(?=[^\]]*$)/g,ua=/^v-slot(:|$)|^#/,la=/[\r\n]/,fa=/\s+/g,pa=k(wi),da="_empty_";function ha(t,e,n){return{type:1,tag:t,attrsList:e,attrsMap:Ea(e),rawAttrsMap:{},parent:n,children:[]}}function ma(t,e){Vi=e.warn||Ir,Zi=e.isPreTag||I,Ji=e.mustUseProp||I,Qi=e.getTagNamespace||I;var n=e.isReservedTag||I;(function(t){return!!t.component||!n(t.tag)}),Yi=Dr(e.modules,"transformNode"),Ki=Dr(e.modules,"preTransformNode"),Xi=Dr(e.modules,"postTransformNode"),Wi=e.delimiters;var r,o,i=[],a=!1!==e.preserveWhitespace,s=e.whitespace,c=!1,u=!1;function l(t){if(f(t),c||t.processed||(t=ga(t,e)),i.length||t===r||r.if&&(t.elseif||t.else)&&ba(r,{exp:t.elseif,block:t}),o&&!t.forbidden)if(t.elseif||t.else)a=t,(s=function(t){var e=t.length;for(;e--;){if(1===t[e].type)return t[e];t.pop()}}(o.children))&&s.if&&ba(s,{exp:a.elseif,block:a});else{if(t.slotScope){var n=t.slotTarget||'"default"';(o.scopedSlots||(o.scopedSlots={}))[n]=t}o.children.push(t),t.parent=o}var a,s;t.children=t.children.filter(function(t){return!t.slotScope}),f(t),t.pre&&(c=!1),Zi(t.tag)&&(u=!1);for(var l=0;l<Xi.length;l++)Xi[l](t,e)}function f(t){if(!u)for(var e;(e=t.children[t.children.length-1])&&3===e.type&&" "===e.text;)t.children.pop()}return function(t,e){for(var n,r,o=[],i=e.expectHTML,a=e.isUnaryTag||I,s=e.canBeLeftOpenTag||I,c=0;t;){if(n=t,r&&Ui(r)){var u=0,l=r.toLowerCase(),f=Fi[l]||(Fi[l]=new RegExp("([\\s\\S]*?)(</"+l+"[^>]*>)","i")),p=t.replace(f,function(t,n,r){return u=r.length,Ui(l)||"noscript"===l||(n=n.replace(/<!\--([\s\S]*?)-->/g,"$1").replace(/<!\[CDATA\[([\s\S]*?)]]>/g,"$1")),Hi(l,n)&&(n=n.slice(1)),e.chars&&e.chars(n),""});c+=t.length-p.length,t=p,A(l,c-u,c)}else{var d=t.indexOf("<");if(0===d){if(Pi.test(t)){var h=t.indexOf("--\x3e");if(h>=0){e.shouldKeepComment&&e.comment(t.substring(4,h),c,c+h+3),x(h+3);continue}}if(ji.test(t)){var m=t.indexOf("]>");if(m>=0){x(m+2);continue}}var g=t.match(Mi);if(g){x(g[0].length);continue}var v=t.match(Di);if(v){var b=c;x(v[0].length),A(v[1],b,c);continue}var _=w();if(_){C(_),Hi(_.tagName,t)&&x(1);continue}}var y=void 0,E=void 0,k=void 0;if(d>=0){for(E=t.slice(d);!(Di.test(E)||Li.test(E)||Pi.test(E)||ji.test(E)||(k=E.indexOf("<",1))<0);)d+=k,E=t.slice(d);y=t.substring(0,d)}d<0&&(y=t),y&&x(y.length),e.chars&&y&&e.chars(y,c-y.length,c)}if(t===n){e.chars&&e.chars(t);break}}function x(e){c+=e,t=t.substring(e)}function w(){var e=t.match(Li);if(e){var n,r,o={tagName:e[1],attrs:[],start:c};for(x(e[0].length);!(n=t.match(Ii))&&(r=t.match(Ri)||t.match(Si));)r.start=c,x(r[0].length),r.end=c,o.attrs.push(r);if(n)return o.unarySlash=n[1],x(n[0].length),o.end=c,o}}function C(t){var n=t.tagName,c=t.unarySlash;i&&("p"===r&&Ti(n)&&A(r),s(n)&&r===n&&A(n));for(var u=a(n)||!!c,l=t.attrs.length,f=new Array(l),p=0;p<l;p++){var d=t.attrs[p],h=d[3]||d[4]||d[5]||"",m="a"===n&&"href"===d[1]?e.shouldDecodeNewlinesForHref:e.shouldDecodeNewlines;f[p]={name:d[1],value:Gi(h,m)}}u||(o.push({tag:n,lowerCasedTag:n.toLowerCase(),attrs:f,start:t.start,end:t.end}),r=n),e.start&&e.start(n,f,u,t.start,t.end)}function A(t,n,i){var a,s;if(null==n&&(n=c),null==i&&(i=c),t)for(s=t.toLowerCase(),a=o.length-1;a>=0&&o[a].lowerCasedTag!==s;a--);else a=0;if(a>=0){for(var u=o.length-1;u>=a;u--)e.end&&e.end(o[u].tag,n,i);o.length=a,r=a&&o[a-1].tag}else"br"===s?e.start&&e.start(t,[],!0,n,i):"p"===s&&(e.start&&e.start(t,[],!1,n,i),e.end&&e.end(t,n,i))}A()}(t,{warn:Vi,expectHTML:e.expectHTML,isUnaryTag:e.isUnaryTag,canBeLeftOpenTag:e.canBeLeftOpenTag,shouldDecodeNewlines:e.shouldDecodeNewlines,shouldDecodeNewlinesForHref:e.shouldDecodeNewlinesForHref,shouldKeepComment:e.comments,outputSourceRange:e.outputSourceRange,start:function(t,n,a,s,f){var p=o&&o.ns||Qi(t);J&&"svg"===p&&(n=function(t){for(var e=[],n=0;n<t.length;n++){var r=t[n];ka.test(r.name)||(r.name=r.name.replace(xa,""),e.push(r))}return e}(n));var d,h=ha(t,n,o);p&&(h.ns=p),"style"!==(d=h).tag&&("script"!==d.tag||d.attrsMap.type&&"text/javascript"!==d.attrsMap.type)||at()||(h.forbidden=!0);for(var m=0;m<Ki.length;m++)h=Ki[m](h,e)||h;c||(!function(t){null!=zr(t,"v-pre")&&(t.pre=!0)}(h),h.pre&&(c=!0)),Zi(h.tag)&&(u=!0),c?function(t){var e=t.attrsList,n=e.length;if(n)for(var r=t.attrs=new Array(n),o=0;o<n;o++)r[o]={name:e[o].name,value:JSON.stringify(e[o].value)},null!=e[o].start&&(r[o].start=e[o].start,r[o].end=e[o].end);else t.pre||(t.plain=!0)}(h):h.processed||(va(h),function(t){var e=zr(t,"v-if");if(e)t.if=e,ba(t,{exp:e,block:t});else{null!=zr(t,"v-else")&&(t.else=!0);var n=zr(t,"v-else-if");n&&(t.elseif=n)}}(h),function(t){null!=zr(t,"v-once")&&(t.once=!0)}(h)),r||(r=h),a?l(h):(o=h,i.push(h))},end:function(t,e,n){var r=i[i.length-1];i.length-=1,o=i[i.length-1],l(r)},chars:function(t,e,n){if(o&&(!J||"textarea"!==o.tag||o.attrsMap.placeholder!==t)){var r,i,l,f=o.children;if(t=u||t.trim()?"script"===(r=o).tag||"style"===r.tag?t:pa(t):f.length?s?"condense"===s&&la.test(t)?"":" ":a?" ":"":"")u||"condense"!==s||(t=t.replace(fa," ")),!c&&" "!==t&&(i=function(t,e){var n=e?yi(e):bi;if(n.test(t)){for(var r,o,i,a=[],s=[],c=n.lastIndex=0;r=n.exec(t);){(o=r.index)>c&&(s.push(i=t.slice(c,o)),a.push(JSON.stringify(i)));var u=Nr(r[1].trim());a.push("_s("+u+")"),s.push({"@binding":u}),c=o+r[0].length}return c<t.length&&(s.push(i=t.slice(c)),a.push(JSON.stringify(i))),{expression:a.join("+"),tokens:s}}}(t,Wi))?l={type:2,expression:i.expression,tokens:i.tokens,text:t}:" "===t&&f.length&&" "===f[f.length-1].text||(l={type:3,text:t}),l&&f.push(l)}},comment:function(t,e,n){if(o){var r={type:3,text:t,isComment:!0};0,o.children.push(r)}}}),r}function ga(t,e){var n;!function(t){var e=Br(t,"key");if(e){t.key=e}}(t),t.plain=!t.key&&!t.scopedSlots&&!t.attrsList.length,function(t){var e=Br(t,"ref");e&&(t.ref=e,t.refInFor=function(t){var e=t;for(;e;){if(void 0!==e.for)return!0;e=e.parent}return!1}(t))}(t),function(t){var e;"template"===t.tag?(e=zr(t,"scope"),t.slotScope=e||zr(t,"slot-scope")):(e=zr(t,"slot-scope"))&&(t.slotScope=e);var n=Br(t,"slot");n&&(t.slotTarget='""'===n?'"default"':n,t.slotTargetDynamic=!(!t.attrsMap[":slot"]&&!t.attrsMap["v-bind:slot"]),"template"===t.tag||t.slotScope||Pr(t,"slot",n,function(t,e){return t.rawAttrsMap[":"+e]||t.rawAttrsMap["v-bind:"+e]||t.rawAttrsMap[e]}(t,"slot")));if("template"===t.tag){var r=qr(t,ua);if(r){0;var o=_a(r),i=o.name,a=o.dynamic;t.slotTarget=i,t.slotTargetDynamic=a,t.slotScope=r.value||da}}else{var s=qr(t,ua);if(s){0;var c=t.scopedSlots||(t.scopedSlots={}),u=_a(s),l=u.name,f=u.dynamic,p=c[l]=ha("template",[],t);p.slotTarget=l,p.slotTargetDynamic=f,p.children=t.children.filter(function(t){if(!t.slotScope)return t.parent=p,!0}),p.slotScope=s.value||da,t.children=[],t.plain=!1}}}(t),"slot"===(n=t).tag&&(n.slotName=Br(n,"name")),function(t){var e;(e=Br(t,"is"))&&(t.component=e);null!=zr(t,"inline-template")&&(t.inlineTemplate=!0)}(t);for(var r=0;r<Yi.length;r++)t=Yi[r](t,e)||t;return function(t){var e,n,r,o,i,a,s,c,u=t.attrsList;for(e=0,n=u.length;e<n;e++){if(r=o=u[e].name,i=u[e].value,ea.test(r))if(t.hasBindings=!0,(a=ya(r.replace(ea,"")))&&(r=r.replace(ca,"")),sa.test(r))r=r.replace(sa,""),i=Nr(i),(c=ia.test(r))&&(r=r.slice(1,-1)),a&&(a.prop&&!c&&"innerHtml"===(r=w(r))&&(r="innerHTML"),a.camel&&!c&&(r=w(r)),a.sync&&(s=Vr(i,"$event"),c?$r(t,'"update:"+('+r+")",s,null,!1,0,u[e],!0):($r(t,"update:"+w(r),s,null,!1,0,u[e]),T(r)!==w(r)&&$r(t,"update:"+T(r),s,null,!1,0,u[e])))),a&&a.prop||!t.component&&Ji(t.tag,t.attrsMap.type,r)?Mr(t,r,i,u[e],c):Pr(t,r,i,u[e],c);else if(ta.test(r))r=r.replace(ta,""),(c=ia.test(r))&&(r=r.slice(1,-1)),$r(t,r,i,a,!1,0,u[e],c);else{var l=(r=r.replace(ea,"")).match(aa),f=l&&l[1];c=!1,f&&(r=r.slice(0,-(f.length+1)),ia.test(f)&&(f=f.slice(1,-1),c=!0)),Ur(t,r,o,i,f,c,a,u[e])}else Pr(t,r,JSON.stringify(i),u[e]),!t.component&&"muted"===r&&Ji(t.tag,t.attrsMap.type,r)&&Mr(t,r,"true",u[e])}}(t),t}function va(t){var e;if(e=zr(t,"v-for")){var n=function(t){var e=t.match(na);if(!e)return;var n={};n.for=e[2].trim();var r=e[1].trim().replace(oa,""),o=r.match(ra);o?(n.alias=r.replace(ra,"").trim(),n.iterator1=o[1].trim(),o[2]&&(n.iterator2=o[2].trim())):n.alias=r;return n}(e);n&&O(t,n)}}function ba(t,e){t.ifConditions||(t.ifConditions=[]),t.ifConditions.push(e)}function _a(t){var e=t.name.replace(ua,"");return e||"#"!==t.name[0]&&(e="default"),ia.test(e)?{name:e.slice(1,-1),dynamic:!0}:{name:'"'+e+'"',dynamic:!1}}function ya(t){var e=t.match(ca);if(e){var n={};return e.forEach(function(t){n[t.slice(1)]=!0}),n}}function Ea(t){for(var e={},n=0,r=t.length;n<r;n++)e[t[n].name]=t[n].value;return e}var ka=/^xmlns:NS\d+/,xa=/^NS\d+:/;function wa(t){return ha(t.tag,t.attrsList.slice(),t.parent)}var Ca=[Ei,xi,{preTransformNode:function(t,e){if("input"===t.tag){var n,r=t.attrsMap;if(!r["v-model"])return;if((r[":type"]||r["v-bind:type"])&&(n=Br(t,"type")),r.type||n||!r["v-bind"]||(n="("+r["v-bind"]+").type"),n){var o=zr(t,"v-if",!0),i=o?"&&("+o+")":"",a=null!=zr(t,"v-else",!0),s=zr(t,"v-else-if",!0),c=wa(t);va(c),jr(c,"type","checkbox"),ga(c,e),c.processed=!0,c.if="("+n+")==='checkbox'"+i,ba(c,{exp:c.if,block:c});var u=wa(t);zr(u,"v-for",!0),jr(u,"type","radio"),ga(u,e),ba(c,{exp:"("+n+")==='radio'"+i,block:u});var l=wa(t);return zr(l,"v-for",!0),jr(l,":type",n),ga(l,e),ba(c,{exp:o,block:l}),a?c.else=!0:s&&(c.elseif=s),c}}}}];var Aa,Ta,Sa={expectHTML:!0,modules:Ca,directives:{model:function(t,e,n){n;var r=e.value,o=e.modifiers,i=t.tag,a=t.attrsMap.type;if(t.component)return Gr(t,r,o),!1;if("select"===i)!function(t,e,n){var r='var $$selectedVal = Array.prototype.filter.call($event.target.options,function(o){return o.selected}).map(function(o){var val = "_value" in o ? o._value : o.value;return '+(n&&n.number?"_n(val)":"val")+"});";r=r+" "+Vr(e,"$event.target.multiple ? $$selectedVal : $$selectedVal[0]"),$r(t,"change",r,null,!0)}(t,r,o);else if("input"===i&&"checkbox"===a)!function(t,e,n){var r=n&&n.number,o=Br(t,"value")||"null",i=Br(t,"true-value")||"true",a=Br(t,"false-value")||"false";Mr(t,"checked","Array.isArray("+e+")?_i("+e+","+o+")>-1"+("true"===i?":("+e+")":":_q("+e+","+i+")")),$r(t,"change","var $$a="+e+",$$el=$event.target,$$c=$$el.checked?("+i+"):("+a+");if(Array.isArray($$a)){var $$v="+(r?"_n("+o+")":o)+",$$i=_i($$a,$$v);if($$el.checked){$$i<0&&("+Vr(e,"$$a.concat([$$v])")+")}else{$$i>-1&&("+Vr(e,"$$a.slice(0,$$i).concat($$a.slice($$i+1))")+")}}else{"+Vr(e,"$$c")+"}",null,!0)}(t,r,o);else if("input"===i&&"radio"===a)!function(t,e,n){var r=n&&n.number,o=Br(t,"value")||"null";Mr(t,"checked","_q("+e+","+(o=r?"_n("+o+")":o)+")"),$r(t,"change",Vr(e,o),null,!0)}(t,r,o);else if("input"===i||"textarea"===i)!function(t,e,n){var r=t.attrsMap.type,o=n||{},i=o.lazy,a=o.number,s=o.trim,c=!i&&"range"!==r,u=i?"change":"range"===r?Qr:"input",l="$event.target.value";s&&(l="$event.target.value.trim()"),a&&(l="_n("+l+")");var f=Vr(e,l);c&&(f="if($event.target.composing)return;"+f),Mr(t,"value","("+e+")"),$r(t,u,f,null,!0),(s||a)&&$r(t,"blur","$forceUpdate()")}(t,r,o);else if(!B.isReservedTag(i))return Gr(t,r,o),!1;return!0},text:function(t,e){e.value&&Mr(t,"textContent","_s("+e.value+")",e)},html:function(t,e){e.value&&Mr(t,"innerHTML","_s("+e.value+")",e)}},isPreTag:function(t){return"pre"===t},isUnaryTag:Ci,mustUseProp:jn,canBeLeftOpenTag:Ai,isReservedTag:Qn,getTagNamespace:tr,staticKeys:function(t){return t.reduce(function(t,e){return t.concat(e.staticKeys||[])},[]).join(",")}(Ca)},Ra=k(function(t){return g("type,tag,attrsList,attrsMap,plain,parent,children,attrs,start,end,rawAttrsMap"+(t?","+t:""))});function Oa(t,e){t&&(Aa=Ra(e.staticKeys||""),Ta=e.isReservedTag||I,function t(e){e.static=function(t){if(2===t.type)return!1;if(3===t.type)return!0;return!(!t.pre&&(t.hasBindings||t.if||t.for||v(t.tag)||!Ta(t.tag)||function(t){for(;t.parent;){if("template"!==(t=t.parent).tag)return!1;if(t.for)return!0}return!1}(t)||!Object.keys(t).every(Aa)))}(e);if(1===e.type){if(!Ta(e.tag)&&"slot"!==e.tag&&null==e.attrsMap["inline-template"])return;for(var n=0,r=e.children.length;n<r;n++){var o=e.children[n];t(o),o.static||(e.static=!1)}if(e.ifConditions)for(var i=1,a=e.ifConditions.length;i<a;i++){var s=e.ifConditions[i].block;t(s),s.static||(e.static=!1)}}}(t),function t(e,n){if(1===e.type){if((e.static||e.once)&&(e.staticInFor=n),e.static&&e.children.length&&(1!==e.children.length||3!==e.children[0].type))return void(e.staticRoot=!0);if(e.staticRoot=!1,e.children)for(var r=0,o=e.children.length;r<o;r++)t(e.children[r],n||!!e.for);if(e.ifConditions)for(var i=1,a=e.ifConditions.length;i<a;i++)t(e.ifConditions[i].block,n)}}(t,!1))}var Na=/^([\w$_]+|\([^)]*?\))\s*=>|^function\s*(?:[\w$]+)?\s*\(/,La=/\([^)]*?\);*$/,Ia=/^[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*|\['[^']*?']|\["[^"]*?"]|\[\d+]|\[[A-Za-z_$][\w$]*])*$/,Da={esc:27,tab:9,enter:13,space:32,up:38,left:37,right:39,down:40,delete:[8,46]},Ma={esc:["Esc","Escape"],tab:"Tab",enter:"Enter",space:[" ","Spacebar"],up:["Up","ArrowUp"],left:["Left","ArrowLeft"],right:["Right","ArrowRight"],down:["Down","ArrowDown"],delete:["Backspace","Delete","Del"]},Pa=function(t){return"if("+t+")return null;"},ja={stop:"$event.stopPropagation();",prevent:"$event.preventDefault();",self:Pa("$event.target !== $event.currentTarget"),ctrl:Pa("!$event.ctrlKey"),shift:Pa("!$event.shiftKey"),alt:Pa("!$event.altKey"),meta:Pa("!$event.metaKey"),left:Pa("'button' in $event && $event.button !== 0"),middle:Pa("'button' in $event && $event.button !== 1"),right:Pa("'button' in $event && $event.button !== 2")};function Ua(t,e){var n=e?"nativeOn:":"on:",r="",o="";for(var i in t){var a=Fa(t[i]);t[i]&&t[i].dynamic?o+=i+","+a+",":r+='"'+i+'":'+a+","}return r="{"+r.slice(0,-1)+"}",o?n+"_d("+r+",["+o.slice(0,-1)+"])":n+r}function Fa(t){if(!t)return"function(){}";if(Array.isArray(t))return"["+t.map(function(t){return Fa(t)}).join(",")+"]";var e=Ia.test(t.value),n=Na.test(t.value),r=Ia.test(t.value.replace(La,""));if(t.modifiers){var o="",i="",a=[];for(var s in t.modifiers)if(ja[s])i+=ja[s],Da[s]&&a.push(s);else if("exact"===s){var c=t.modifiers;i+=Pa(["ctrl","shift","alt","meta"].filter(function(t){return!c[t]}).map(function(t){return"$event."+t+"Key"}).join("||"))}else a.push(s);return a.length&&(o+=function(t){return"if(!$event.type.indexOf('key')&&"+t.map($a).join("&&")+")return null;"}(a)),i&&(o+=i),"function($event){"+o+(e?"return "+t.value+"($event)":n?"return ("+t.value+")($event)":r?"return "+t.value:t.value)+"}"}return e||n?t.value:"function($event){"+(r?"return "+t.value:t.value)+"}"}function $a(t){var e=parseInt(t,10);if(e)return"$event.keyCode!=="+e;var n=Da[t],r=Ma[t];return"_k($event.keyCode,"+JSON.stringify(t)+","+JSON.stringify(n)+",$event.key,"+JSON.stringify(r)+")"}var Ba={on:function(t,e){t.wrapListeners=function(t){return"_g("+t+","+e.value+")"}},bind:function(t,e){t.wrapData=function(n){return"_b("+n+",'"+t.tag+"',"+e.value+","+(e.modifiers&&e.modifiers.prop?"true":"false")+(e.modifiers&&e.modifiers.sync?",true":"")+")"}},cloak:L},za=function(t){this.options=t,this.warn=t.warn||Ir,this.transforms=Dr(t.modules,"transformCode"),this.dataGenFns=Dr(t.modules,"genData"),this.directives=O(O({},Ba),t.directives);var e=t.isReservedTag||I;this.maybeComponent=function(t){return!!t.component||!e(t.tag)},this.onceId=0,this.staticRenderFns=[],this.pre=!1};function qa(t,e){var n=new za(e);return{render:"with(this){return "+(t?Ha(t,n):'_c("div")')+"}",staticRenderFns:n.staticRenderFns}}function Ha(t,e){if(t.parent&&(t.pre=t.pre||t.parent.pre),t.staticRoot&&!t.staticProcessed)return Ga(t,e);if(t.once&&!t.onceProcessed)return Va(t,e);if(t.for&&!t.forProcessed)return Ya(t,e);if(t.if&&!t.ifProcessed)return Wa(t,e);if("template"!==t.tag||t.slotTarget||e.pre){if("slot"===t.tag)return function(t,e){var n=t.slotName||'"default"',r=Ja(t,e),o="_t("+n+(r?","+r:""),i=t.attrs||t.dynamicAttrs?es((t.attrs||[]).concat(t.dynamicAttrs||[]).map(function(t){return{name:w(t.name),value:t.value,dynamic:t.dynamic}})):null,a=t.attrsMap["v-bind"];!i&&!a||r||(o+=",null");i&&(o+=","+i);a&&(o+=(i?"":",null")+","+a);return o+")"}(t,e);var n;if(t.component)n=function(t,e,n){var r=e.inlineTemplate?null:Ja(e,n,!0);return"_c("+t+","+Ka(e,n)+(r?","+r:"")+")"}(t.component,t,e);else{var r;(!t.plain||t.pre&&e.maybeComponent(t))&&(r=Ka(t,e));var o=t.inlineTemplate?null:Ja(t,e,!0);n="_c('"+t.tag+"'"+(r?","+r:"")+(o?","+o:"")+")"}for(var i=0;i<e.transforms.length;i++)n=e.transforms[i](t,n);return n}return Ja(t,e)||"void 0"}function Ga(t,e){t.staticProcessed=!0;var n=e.pre;return t.pre&&(e.pre=t.pre),e.staticRenderFns.push("with(this){return "+Ha(t,e)+"}"),e.pre=n,"_m("+(e.staticRenderFns.length-1)+(t.staticInFor?",true":"")+")"}function Va(t,e){if(t.onceProcessed=!0,t.if&&!t.ifProcessed)return Wa(t,e);if(t.staticInFor){for(var n="",r=t.parent;r;){if(r.for){n=r.key;break}r=r.parent}return n?"_o("+Ha(t,e)+","+e.onceId+++","+n+")":Ha(t,e)}return Ga(t,e)}function Wa(t,e,n,r){return t.ifProcessed=!0,function t(e,n,r,o){if(!e.length)return o||"_e()";var i=e.shift();return i.exp?"("+i.exp+")?"+a(i.block)+":"+t(e,n,r,o):""+a(i.block);function a(t){return r?r(t,n):t.once?Va(t,n):Ha(t,n)}}(t.ifConditions.slice(),e,n,r)}function Ya(t,e,n,r){var o=t.for,i=t.alias,a=t.iterator1?","+t.iterator1:"",s=t.iterator2?","+t.iterator2:"";return t.forProcessed=!0,(r||"_l")+"(("+o+"),function("+i+a+s+"){return "+(n||Ha)(t,e)+"})"}function Ka(t,e){var n="{",r=function(t,e){var n=t.directives;if(!n)return;var r,o,i,a,s="directives:[",c=!1;for(r=0,o=n.length;r<o;r++){i=n[r],a=!0;var u=e.directives[i.name];u&&(a=!!u(t,i,e.warn)),a&&(c=!0,s+='{name:"'+i.name+'",rawName:"'+i.rawName+'"'+(i.value?",value:("+i.value+"),expression:"+JSON.stringify(i.value):"")+(i.arg?",arg:"+(i.isDynamicArg?i.arg:'"'+i.arg+'"'):"")+(i.modifiers?",modifiers:"+JSON.stringify(i.modifiers):"")+"},")}if(c)return s.slice(0,-1)+"]"}(t,e);r&&(n+=r+","),t.key&&(n+="key:"+t.key+","),t.ref&&(n+="ref:"+t.ref+","),t.refInFor&&(n+="refInFor:true,"),t.pre&&(n+="pre:true,"),t.component&&(n+='tag:"'+t.tag+'",');for(var o=0;o<e.dataGenFns.length;o++)n+=e.dataGenFns[o](t);if(t.attrs&&(n+="attrs:"+es(t.attrs)+","),t.props&&(n+="domProps:"+es(t.props)+","),t.events&&(n+=Ua(t.events,!1)+","),t.nativeEvents&&(n+=Ua(t.nativeEvents,!0)+","),t.slotTarget&&!t.slotScope&&(n+="slot:"+t.slotTarget+","),t.scopedSlots&&(n+=function(t,e,n){var r=t.for||Object.keys(e).some(function(t){var n=e[t];return n.slotTargetDynamic||n.if||n.for||Xa(n)}),o=!!t.if;if(!r)for(var i=t.parent;i;){if(i.slotScope&&i.slotScope!==da||i.for){r=!0;break}i.if&&(o=!0),i=i.parent}var a=Object.keys(e).map(function(t){return Za(e[t],n)}).join(",");return"scopedSlots:_u(["+a+"]"+(r?",null,true":"")+(!r&&o?",null,false,"+function(t){var e=5381,n=t.length;for(;n;)e=33*e^t.charCodeAt(--n);return e>>>0}(a):"")+")"}(t,t.scopedSlots,e)+","),t.model&&(n+="model:{value:"+t.model.value+",callback:"+t.model.callback+",expression:"+t.model.expression+"},"),t.inlineTemplate){var i=function(t,e){var n=t.children[0];0;if(n&&1===n.type){var r=qa(n,e.options);return"inlineTemplate:{render:function(){"+r.render+"},staticRenderFns:["+r.staticRenderFns.map(function(t){return"function(){"+t+"}"}).join(",")+"]}"}}(t,e);i&&(n+=i+",")}return n=n.replace(/,$/,"")+"}",t.dynamicAttrs&&(n="_b("+n+',"'+t.tag+'",'+es(t.dynamicAttrs)+")"),t.wrapData&&(n=t.wrapData(n)),t.wrapListeners&&(n=t.wrapListeners(n)),n}function Xa(t){return 1===t.type&&("slot"===t.tag||t.children.some(Xa))}function Za(t,e){var n=t.attrsMap["slot-scope"];if(t.if&&!t.ifProcessed&&!n)return Wa(t,e,Za,"null");if(t.for&&!t.forProcessed)return Ya(t,e,Za);var r=t.slotScope===da?"":String(t.slotScope),o="function("+r+"){return "+("template"===t.tag?t.if&&n?"("+t.if+")?"+(Ja(t,e)||"undefined")+":undefined":Ja(t,e)||"undefined":Ha(t,e))+"}",i=r?"":",proxy:true";return"{key:"+(t.slotTarget||'"default"')+",fn:"+o+i+"}"}function Ja(t,e,n,r,o){var i=t.children;if(i.length){var a=i[0];if(1===i.length&&a.for&&"template"!==a.tag&&"slot"!==a.tag){var s=n?e.maybeComponent(a)?",1":",0":"";return""+(r||Ha)(a,e)+s}var c=n?function(t,e){for(var n=0,r=0;r<t.length;r++){var o=t[r];if(1===o.type){if(Qa(o)||o.ifConditions&&o.ifConditions.some(function(t){return Qa(t.block)})){n=2;break}(e(o)||o.ifConditions&&o.ifConditions.some(function(t){return e(t.block)}))&&(n=1)}}return n}(i,e.maybeComponent):0,u=o||ts;return"["+i.map(function(t){return u(t,e)}).join(",")+"]"+(c?","+c:"")}}function Qa(t){return void 0!==t.for||"template"===t.tag||"slot"===t.tag}function ts(t,e){return 1===t.type?Ha(t,e):3===t.type&&t.isComment?function(t){return"_e("+JSON.stringify(t.text)+")"}(t):function(t){return"_v("+(2===t.type?t.expression:ns(JSON.stringify(t.text)))+")"}(t)}function es(t){for(var e="",n="",r=0;r<t.length;r++){var o=t[r],i=ns(o.value);o.dynamic?n+=o.name+","+i+",":e+='"'+o.name+'":'+i+","}return e="{"+e.slice(0,-1)+"}",n?"_d("+e+",["+n.slice(0,-1)+"])":e}function ns(t){return t.replace(/\u2028/g,"\\u2028").replace(/\u2029/g,"\\u2029")}new RegExp("\\b"+"do,if,for,let,new,try,var,case,else,with,await,break,catch,class,const,super,throw,while,yield,delete,export,import,return,switch,default,extends,finally,continue,debugger,function,arguments".split(",").join("\\b|\\b")+"\\b"),new RegExp("\\b"+"delete,typeof,void".split(",").join("\\s*\\([^\\)]*\\)|\\b")+"\\s*\\([^\\)]*\\)");function rs(t,e){try{return new Function(t)}catch(n){return e.push({err:n,code:t}),L}}function os(t){var e=Object.create(null);return function(n,r,o){(r=O({},r)).warn;delete r.warn;var i=r.delimiters?String(r.delimiters)+n:n;if(e[i])return e[i];var a=t(n,r);var s={},c=[];return s.render=rs(a.render,c),s.staticRenderFns=a.staticRenderFns.map(function(t){return rs(t,c)}),e[i]=s}}var is,as,ss=(is=function(t,e){var n=ma(t.trim(),e);!1!==e.optimize&&Oa(n,e);var r=qa(n,e);return{ast:n,render:r.render,staticRenderFns:r.staticRenderFns}},function(t){function e(e,n){var r=Object.create(t),o=[],i=[];if(n)for(var a in n.modules&&(r.modules=(t.modules||[]).concat(n.modules)),n.directives&&(r.directives=O(Object.create(t.directives||null),n.directives)),n)"modules"!==a&&"directives"!==a&&(r[a]=n[a]);r.warn=function(t,e,n){(n?i:o).push(t)};var s=is(e.trim(),r);return s.errors=o,s.tips=i,s}return{compile:e,compileToFunctions:os(e)}})(Sa),cs=(ss.compile,ss.compileToFunctions);function us(t){return(as=as||document.createElement("div")).innerHTML=t?'<a href="\n"/>':'<div a="\n"/>',as.innerHTML.indexOf("&#10;")>0}var ls=!!Y&&us(!1),fs=!!Y&&us(!0),ps=k(function(t){var e=rr(t);return e&&e.innerHTML}),ds=Tn.prototype.$mount;Tn.prototype.$mount=function(t,e){if((t=t&&rr(t))===document.body||t===document.documentElement)return this;var n=this.$options;if(!n.render){var r=n.template;if(r)if("string"==typeof r)"#"===r.charAt(0)&&(r=ps(r));else{if(!r.nodeType)return this;r=r.innerHTML}else t&&(r=function(t){if(t.outerHTML)return t.outerHTML;var e=document.createElement("div");return e.appendChild(t.cloneNode(!0)),e.innerHTML}(t));if(r){0;var o=cs(r,{outputSourceRange:!1,shouldDecodeNewlines:ls,shouldDecodeNewlinesForHref:fs,delimiters:n.delimiters,comments:n.comments},this),i=o.render,a=o.staticRenderFns;n.render=i,n.staticRenderFns=a}}return ds.call(this,t,e)},Tn.compile=cs,e.a=Tn}).call(this,n(11),n(154).setImmediate)},function(t,e,n){var r=n(71),o="object"==typeof self&&self&&self.Object===Object&&self,i=r||o||Function("return this")();t.exports=i},function(t,e){var n=Array.isArray;t.exports=n},function(t,e,n){t.exports=n(99)},function(t,e){var n;n=function(){return this}();try{n=n||new Function("return this")()}catch(t){"object"==typeof window&&(n=window)}t.exports=n},function(t,e,n){var r=n(199),o=n(202);t.exports=function(t,e){var n=o(t,e);return r(n)?n:void 0}},function(t,e,n){"use strict";var r={props:{name:{required:!0},method:{default:null}},data:function(){return{segments:[],segmentsClass:""}},watch:{name:{immediate:!0,handler:function(){this.segments=this.name.split("\\"),this.segmentsClass=this.segments.pop()}}}},o=n(0),i=Object(o.a)(r,function(){var t=this,e=t.$createElement,n=t._self._c||e;return n("span",{staticClass:"ui-exception-class"},[t._l(t.segments,function(e,r){return n("span",{key:r,staticClass:"opacity-75"},[t._v(t._s(e)+"\\"),n("wbr")])}),n("span",[t._v(t._s(t.segmentsClass)),n("wbr")]),t.method?n("span",{staticClass:"opacity-75"},[t._v("::"+t._s(t.method))]):t._e()],2)},[],!1,null,null,null);e.a=i.exports},function(t,e,n){"use strict";var r={props:{lineNumber:{required:!0}}},o=n(0),i=Object(o.a)(r,function(){var t=this.$createElement,e=this._self._c||t;return e("span",{staticClass:"ui-line-number"},[this._v("\n    :"),e("span",{staticClass:"font-mono"},[this._v(this._s(this.lineNumber))])])},[],!1,null,null,null);e.a=i.exports},function(t,e,n){var r=n(215);t.exports=function(t){return t&&t.length?r(t):[]}},function(t,e,n){var r=n(70);t.exports=function(t){return null==t?"":r(t)}},function(t,e,n){var r=n(22),o=n(176),i=n(177),a="[object Null]",s="[object Undefined]",c=r?r.toStringTag:void 0;t.exports=function(t){return null==t?void 0===t?s:a:c&&c in Object(t)?o(t):i(t)}},function(t,e){t.exports=function(t){return null!=t&&"object"==typeof t}},function(t,e){t.exports=function(t){var e=typeof t;return null!=t&&("object"==e||"function"==e)}},function(t,e){function n(t,e,n,r,o,i,a){try{var s=t[i](a),c=s.value}catch(t){return void n(t)}s.done?e(c):Promise.resolve(c).then(r,o)}t.exports=function(t){return function(){var e=this,r=arguments;return new Promise(function(o,i){var a=t.apply(e,r);function s(t){n(a,o,i,s,c,"next",t)}function c(t){n(a,o,i,s,c,"throw",t)}s(void 0)})}}},function(t,e){t.exports=function(t){return t.webpackPolyfill||(t.deprecate=function(){},t.paths=[],t.children||(t.children=[]),Object.defineProperty(t,"loaded",{enumerable:!0,get:function(){return t.l}}),Object.defineProperty(t,"id",{enumerable:!0,get:function(){return t.i}}),t.webpackPolyfill=1),t}},function(t,e,n){var r=n(8).Symbol;t.exports=r},function(t,e,n){var r=n(17),o=n(18),i="[object Symbol]";t.exports=function(t){return"symbol"==typeof t||o(t)&&r(t)==i}},function(t,e,n){"use strict";e.__esModule=!0;var r=c(n(180)),o=c(n(39)),i=c(n(185)),a=c(n(193)),s=c(n(194));function c(t){return t&&t.__esModule?t:{default:t}}var u=function(){function t(e,n){!function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}(this,t),this.cfg=e||{},this.indentation=new i.default(this.cfg.indent),this.inlineBlock=new a.default,this.params=new s.default(this.cfg.params),this.tokenizer=n,this.previousReservedWord={},this.tokens=[],this.index=0}return t.prototype.format=function(t){return this.tokens=this.tokenizer.tokenize(t),this.getFormattedQueryFromTokens().trim()},t.prototype.getFormattedQueryFromTokens=function(){var t=this,e="";return this.tokens.forEach(function(n,r){t.index=r,n.type===o.default.WHITESPACE||(n.type===o.default.LINE_COMMENT?e=t.formatLineComment(n,e):n.type===o.default.BLOCK_COMMENT?e=t.formatBlockComment(n,e):n.type===o.default.RESERVED_TOPLEVEL?(e=t.formatToplevelReservedWord(n,e),t.previousReservedWord=n):n.type===o.default.RESERVED_NEWLINE?(e=t.formatNewlineReservedWord(n,e),t.previousReservedWord=n):n.type===o.default.RESERVED?(e=t.formatWithSpaces(n,e),t.previousReservedWord=n):e=n.type===o.default.OPEN_PAREN?t.formatOpeningParentheses(n,e):n.type===o.default.CLOSE_PAREN?t.formatClosingParentheses(n,e):n.type===o.default.PLACEHOLDER?t.formatPlaceholder(n,e):","===n.value?t.formatComma(n,e):":"===n.value?t.formatWithSpaceAfter(n,e):"."===n.value?t.formatWithoutSpaces(n,e):";"===n.value?t.formatQuerySeparator(n,e):t.formatWithSpaces(n,e))}),e},t.prototype.formatLineComment=function(t,e){return this.addNewline(e+t.value)},t.prototype.formatBlockComment=function(t,e){return this.addNewline(this.addNewline(e)+this.indentComment(t.value))},t.prototype.indentComment=function(t){return t.replace(/\n/g,"\n"+this.indentation.getIndent())},t.prototype.formatToplevelReservedWord=function(t,e){return this.indentation.decreaseTopLevel(),e=this.addNewline(e),this.indentation.increaseToplevel(),e+=this.equalizeWhitespace(t.value),this.addNewline(e)},t.prototype.formatNewlineReservedWord=function(t,e){return this.addNewline(e)+this.equalizeWhitespace(t.value)+" "},t.prototype.equalizeWhitespace=function(t){return t.replace(/\s+/g," ")},t.prototype.formatOpeningParentheses=function(t,e){return[o.default.WHITESPACE,o.default.OPEN_PAREN,o.default.LINE_COMMENT].includes(this.previousToken().type)||(e=(0,r.default)(e)),e+=t.value,this.inlineBlock.beginIfPossible(this.tokens,this.index),this.inlineBlock.isActive()||(this.indentation.increaseBlockLevel(),e=this.addNewline(e)),e},t.prototype.formatClosingParentheses=function(t,e){return this.inlineBlock.isActive()?(this.inlineBlock.end(),this.formatWithSpaceAfter(t,e)):(this.indentation.decreaseBlockLevel(),this.formatWithSpaces(t,this.addNewline(e)))},t.prototype.formatPlaceholder=function(t,e){return e+this.params.get(t)+" "},t.prototype.formatComma=function(t,e){return e=this.trimTrailingWhitespace(e)+t.value+" ",this.inlineBlock.isActive()?e:/^LIMIT$/i.test(this.previousReservedWord.value)?e:this.addNewline(e)},t.prototype.formatWithSpaceAfter=function(t,e){return this.trimTrailingWhitespace(e)+t.value+" "},t.prototype.formatWithoutSpaces=function(t,e){return this.trimTrailingWhitespace(e)+t.value},t.prototype.formatWithSpaces=function(t,e){return e+t.value+" "},t.prototype.formatQuerySeparator=function(t,e){return this.trimTrailingWhitespace(e)+t.value+"\n"},t.prototype.addNewline=function(t){return(0,r.default)(t)+"\n"+this.indentation.getIndent()},t.prototype.trimTrailingWhitespace=function(t){return this.previousNonWhitespaceToken().type===o.default.LINE_COMMENT?(0,r.default)(t)+"\n":(0,r.default)(t)},t.prototype.previousNonWhitespaceToken=function(){for(var t=1;this.previousToken(t).type===o.default.WHITESPACE;)t++;return this.previousToken(t)},t.prototype.previousToken=function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:1;return this.tokens[this.index-t]||{}},t}();e.default=u,t.exports=e.default},function(t,e,n){"use strict";e.__esModule=!0;var r=a(n(195)),o=a(n(210)),i=a(n(39));function a(t){return t&&t.__esModule?t:{default:t}}var s=function(){function t(e){!function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}(this,t),this.WHITESPACE_REGEX=/^(\s+)/,this.NUMBER_REGEX=/^((-\s*)?[0-9]+(\.[0-9]+)?|0x[0-9a-fA-F]+|0b[01]+)\b/,this.OPERATOR_REGEX=/^(!=|<>|==|<=|>=|!<|!>|\|\||::|->>|->|~~\*|~~|!~~\*|!~~|~\*|!~\*|!~|.)/,this.BLOCK_COMMENT_REGEX=/^(\/\*[^]*?(?:\*\/|$))/,this.LINE_COMMENT_REGEX=this.createLineCommentRegex(e.lineCommentTypes),this.RESERVED_TOPLEVEL_REGEX=this.createReservedWordRegex(e.reservedToplevelWords),this.RESERVED_NEWLINE_REGEX=this.createReservedWordRegex(e.reservedNewlineWords),this.RESERVED_PLAIN_REGEX=this.createReservedWordRegex(e.reservedWords),this.WORD_REGEX=this.createWordRegex(e.specialWordChars),this.STRING_REGEX=this.createStringRegex(e.stringTypes),this.OPEN_PAREN_REGEX=this.createParenRegex(e.openParens),this.CLOSE_PAREN_REGEX=this.createParenRegex(e.closeParens),this.INDEXED_PLACEHOLDER_REGEX=this.createPlaceholderRegex(e.indexedPlaceholderTypes,"[0-9]*"),this.IDENT_NAMED_PLACEHOLDER_REGEX=this.createPlaceholderRegex(e.namedPlaceholderTypes,"[a-zA-Z0-9._$]+"),this.STRING_NAMED_PLACEHOLDER_REGEX=this.createPlaceholderRegex(e.namedPlaceholderTypes,this.createStringPattern(e.stringTypes))}return t.prototype.createLineCommentRegex=function(t){return new RegExp("^((?:"+t.map(function(t){return(0,o.default)(t)}).join("|")+").*?(?:\n|$))")},t.prototype.createReservedWordRegex=function(t){var e=t.join("|").replace(/ /g,"\\s+");return new RegExp("^("+e+")\\b","i")},t.prototype.createWordRegex=function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:[];return new RegExp("^([\\w"+t.join("")+"]+)")},t.prototype.createStringRegex=function(t){return new RegExp("^("+this.createStringPattern(t)+")")},t.prototype.createStringPattern=function(t){var e={"``":"((`[^`]*($|`))+)","[]":"((\\[[^\\]]*($|\\]))(\\][^\\]]*($|\\]))*)",'""':'(("[^"\\\\]*(?:\\\\.[^"\\\\]*)*("|$))+)',"''":"(('[^'\\\\]*(?:\\\\.[^'\\\\]*)*('|$))+)","N''":"((N'[^N'\\\\]*(?:\\\\.[^N'\\\\]*)*('|$))+)"};return t.map(function(t){return e[t]}).join("|")},t.prototype.createParenRegex=function(t){var e=this;return new RegExp("^("+t.map(function(t){return e.escapeParen(t)}).join("|")+")","i")},t.prototype.escapeParen=function(t){return 1===t.length?(0,o.default)(t):"\\b"+t+"\\b"},t.prototype.createPlaceholderRegex=function(t,e){if((0,r.default)(t))return!1;var n=t.map(o.default).join("|");return new RegExp("^((?:"+n+")(?:"+e+"))")},t.prototype.tokenize=function(t){for(var e=[],n=void 0;t.length;)n=this.getNextToken(t,n),t=t.substring(n.value.length),e.push(n);return e},t.prototype.getNextToken=function(t,e){return this.getWhitespaceToken(t)||this.getCommentToken(t)||this.getStringToken(t)||this.getOpenParenToken(t)||this.getCloseParenToken(t)||this.getPlaceholderToken(t)||this.getNumberToken(t)||this.getReservedWordToken(t,e)||this.getWordToken(t)||this.getOperatorToken(t)},t.prototype.getWhitespaceToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.WHITESPACE,regex:this.WHITESPACE_REGEX})},t.prototype.getCommentToken=function(t){return this.getLineCommentToken(t)||this.getBlockCommentToken(t)},t.prototype.getLineCommentToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.LINE_COMMENT,regex:this.LINE_COMMENT_REGEX})},t.prototype.getBlockCommentToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.BLOCK_COMMENT,regex:this.BLOCK_COMMENT_REGEX})},t.prototype.getStringToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.STRING,regex:this.STRING_REGEX})},t.prototype.getOpenParenToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.OPEN_PAREN,regex:this.OPEN_PAREN_REGEX})},t.prototype.getCloseParenToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.CLOSE_PAREN,regex:this.CLOSE_PAREN_REGEX})},t.prototype.getPlaceholderToken=function(t){return this.getIdentNamedPlaceholderToken(t)||this.getStringNamedPlaceholderToken(t)||this.getIndexedPlaceholderToken(t)},t.prototype.getIdentNamedPlaceholderToken=function(t){return this.getPlaceholderTokenWithKey({input:t,regex:this.IDENT_NAMED_PLACEHOLDER_REGEX,parseKey:function(t){return t.slice(1)}})},t.prototype.getStringNamedPlaceholderToken=function(t){var e=this;return this.getPlaceholderTokenWithKey({input:t,regex:this.STRING_NAMED_PLACEHOLDER_REGEX,parseKey:function(t){return e.getEscapedPlaceholderKey({key:t.slice(2,-1),quoteChar:t.slice(-1)})}})},t.prototype.getIndexedPlaceholderToken=function(t){return this.getPlaceholderTokenWithKey({input:t,regex:this.INDEXED_PLACEHOLDER_REGEX,parseKey:function(t){return t.slice(1)}})},t.prototype.getPlaceholderTokenWithKey=function(t){var e=t.input,n=t.regex,r=t.parseKey,o=this.getTokenOnFirstMatch({input:e,regex:n,type:i.default.PLACEHOLDER});return o&&(o.key=r(o.value)),o},t.prototype.getEscapedPlaceholderKey=function(t){var e=t.key,n=t.quoteChar;return e.replace(new RegExp((0,o.default)("\\")+n,"g"),n)},t.prototype.getNumberToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.NUMBER,regex:this.NUMBER_REGEX})},t.prototype.getOperatorToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.OPERATOR,regex:this.OPERATOR_REGEX})},t.prototype.getReservedWordToken=function(t,e){if(!e||!e.value||"."!==e.value)return this.getToplevelReservedToken(t)||this.getNewlineReservedToken(t)||this.getPlainReservedToken(t)},t.prototype.getToplevelReservedToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.RESERVED_TOPLEVEL,regex:this.RESERVED_TOPLEVEL_REGEX})},t.prototype.getNewlineReservedToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.RESERVED_NEWLINE,regex:this.RESERVED_NEWLINE_REGEX})},t.prototype.getPlainReservedToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.RESERVED,regex:this.RESERVED_PLAIN_REGEX})},t.prototype.getWordToken=function(t){return this.getTokenOnFirstMatch({input:t,type:i.default.WORD,regex:this.WORD_REGEX})},t.prototype.getTokenOnFirstMatch=function(t){var e=t.input,n=t.type,r=t.regex,o=e.match(r);if(o)return{type:n,value:o[1]}},t}();e.default=s,t.exports=e.default},function(t,e,n){var r=n(12)(Object,"create");t.exports=r},function(t,e,n){var r=n(223),o=n(224),i=n(225),a=n(226),s=n(227);function c(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}c.prototype.clear=r,c.prototype.delete=o,c.prototype.get=i,c.prototype.has=a,c.prototype.set=s,t.exports=c},function(t,e,n){var r=n(40);t.exports=function(t,e){for(var n=t.length;n--;)if(r(t[n][0],e))return n;return-1}},function(t,e,n){var r=n(229);t.exports=function(t,e){var n=t.__data__;return r(e)?n["string"==typeof e?"string":"hash"]:n.map}},function(t,e,n){var r=n(23),o=1/0;t.exports=function(t){if("string"==typeof t||r(t))return t;var e=t+"";return"0"==e&&1/t==-o?"-0":e}},function(t,e){t.exports=function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}},function(t,e){function n(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable||!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}t.exports=function(t,e,r){return e&&n(t.prototype,e),r&&n(t,r),t}},function(t,e,n){"use strict";function r(t,e,n){var r=t.editor,o={sublime:"subl://open?url=file://%path&line=%line",textmate:"txmt://open?url=file://%path&line=%line",emacs:"emacs://open?url=file://%path&line=%line",macvim:"mvim://open/?url=file://%path&line=%line",phpstorm:"phpstorm://open?file=%path&line=%line",idea:"idea://open?file=%path&line=%line",vscode:"vscode://file/%path:%line","vscode-insiders":"vscode-insiders://file/%path:%line",atom:"atom://core/open/file?filename=%path&line=%line"};return e=(t.remoteSitesPath||!1).length>0&&(t.localSitesPath||!1).length>0?e.replace(t.remoteSitesPath,t.localSitesPath):e,Object.keys(o).includes(r)?o[r].replace("%path",encodeURIComponent(e)).replace("%line",encodeURIComponent(n)):(console.error("'".concat(r,"' is not supported. Support editors are: ").concat(Object.keys(o).join(", "))),null)}n.d(e,"a",function(){return r})},function(t,e,n){var r=n(171)("toUpperCase");t.exports=r},function(t,e,n){"use strict";var r={props:{label:{required:!0},name:{required:!0},disabled:{required:!1},value:{required:!1,default:!1}},methods:{checkboxChanged:function(t){this.$emit("input",t.target.checked)}}},o=n(0),i=Object(o.a)(r,function(){var t=this,e=t.$createElement,n=t._self._c||e;return n("label",{staticClass:"checkbox-label",class:t.disabled?"text-gray-400 pointer-events-none":"",attrs:{for:t.name}},[n("input",{staticClass:"checkbox",attrs:{id:t.name,type:"checkbox",disabled:t.disabled},domProps:{checked:t.value},on:{change:t.checkboxChanged}}),t._v("\n    "+t._s(t.label)+"\n")])},[],!1,null,null,null);e.a=i.exports},function(t,e){t.exports=/[!-#%-\*,-\/:;\?@\[-\]_\{\}\xA1\xA7\xAB\xB6\xB7\xBB\xBF\u037E\u0387\u055A-\u055F\u0589\u058A\u05BE\u05C0\u05C3\u05C6\u05F3\u05F4\u0609\u060A\u060C\u060D\u061B\u061E\u061F\u066A-\u066D\u06D4\u0700-\u070D\u07F7-\u07F9\u0830-\u083E\u085E\u0964\u0965\u0970\u09FD\u0A76\u0AF0\u0C84\u0DF4\u0E4F\u0E5A\u0E5B\u0F04-\u0F12\u0F14\u0F3A-\u0F3D\u0F85\u0FD0-\u0FD4\u0FD9\u0FDA\u104A-\u104F\u10FB\u1360-\u1368\u1400\u166D\u166E\u169B\u169C\u16EB-\u16ED\u1735\u1736\u17D4-\u17D6\u17D8-\u17DA\u1800-\u180A\u1944\u1945\u1A1E\u1A1F\u1AA0-\u1AA6\u1AA8-\u1AAD\u1B5A-\u1B60\u1BFC-\u1BFF\u1C3B-\u1C3F\u1C7E\u1C7F\u1CC0-\u1CC7\u1CD3\u2010-\u2027\u2030-\u2043\u2045-\u2051\u2053-\u205E\u207D\u207E\u208D\u208E\u2308-\u230B\u2329\u232A\u2768-\u2775\u27C5\u27C6\u27E6-\u27EF\u2983-\u2998\u29D8-\u29DB\u29FC\u29FD\u2CF9-\u2CFC\u2CFE\u2CFF\u2D70\u2E00-\u2E2E\u2E30-\u2E4E\u3001-\u3003\u3008-\u3011\u3014-\u301F\u3030\u303D\u30A0\u30FB\uA4FE\uA4FF\uA60D-\uA60F\uA673\uA67E\uA6F2-\uA6F7\uA874-\uA877\uA8CE\uA8CF\uA8F8-\uA8FA\uA8FC\uA92E\uA92F\uA95F\uA9C1-\uA9CD\uA9DE\uA9DF\uAA5C-\uAA5F\uAADE\uAADF\uAAF0\uAAF1\uABEB\uFD3E\uFD3F\uFE10-\uFE19\uFE30-\uFE52\uFE54-\uFE61\uFE63\uFE68\uFE6A\uFE6B\uFF01-\uFF03\uFF05-\uFF0A\uFF0C-\uFF0F\uFF1A\uFF1B\uFF1F\uFF20\uFF3B-\uFF3D\uFF3F\uFF5B\uFF5D\uFF5F-\uFF65]|\uD800[\uDD00-\uDD02\uDF9F\uDFD0]|\uD801\uDD6F|\uD802[\uDC57\uDD1F\uDD3F\uDE50-\uDE58\uDE7F\uDEF0-\uDEF6\uDF39-\uDF3F\uDF99-\uDF9C]|\uD803[\uDF55-\uDF59]|\uD804[\uDC47-\uDC4D\uDCBB\uDCBC\uDCBE-\uDCC1\uDD40-\uDD43\uDD74\uDD75\uDDC5-\uDDC8\uDDCD\uDDDB\uDDDD-\uDDDF\uDE38-\uDE3D\uDEA9]|\uD805[\uDC4B-\uDC4F\uDC5B\uDC5D\uDCC6\uDDC1-\uDDD7\uDE41-\uDE43\uDE60-\uDE6C\uDF3C-\uDF3E]|\uD806[\uDC3B\uDE3F-\uDE46\uDE9A-\uDE9C\uDE9E-\uDEA2]|\uD807[\uDC41-\uDC45\uDC70\uDC71\uDEF7\uDEF8]|\uD809[\uDC70-\uDC74]|\uD81A[\uDE6E\uDE6F\uDEF5\uDF37-\uDF3B\uDF44]|\uD81B[\uDE97-\uDE9A]|\uD82F\uDC9F|\uD836[\uDE87-\uDE8B]|\uD83A[\uDD5E\uDD5F]/},function(t,e,n){"use strict";function r(){this.__rules__=[],this.__cache__=null}r.prototype.__find__=function(t){for(var e=0;e<this.__rules__.length;e++)if(this.__rules__[e].name===t)return e;return-1},r.prototype.__compile__=function(){var t=this,e=[""];t.__rules__.forEach(function(t){t.enabled&&t.alt.forEach(function(t){e.indexOf(t)<0&&e.push(t)})}),t.__cache__={},e.forEach(function(e){t.__cache__[e]=[],t.__rules__.forEach(function(n){n.enabled&&(e&&n.alt.indexOf(e)<0||t.__cache__[e].push(n.fn))})})},r.prototype.at=function(t,e,n){var r=this.__find__(t),o=n||{};if(-1===r)throw new Error("Parser rule not found: "+t);this.__rules__[r].fn=e,this.__rules__[r].alt=o.alt||[],this.__cache__=null},r.prototype.before=function(t,e,n,r){var o=this.__find__(t),i=r||{};if(-1===o)throw new Error("Parser rule not found: "+t);this.__rules__.splice(o,0,{name:e,enabled:!0,fn:n,alt:i.alt||[]}),this.__cache__=null},r.prototype.after=function(t,e,n,r){var o=this.__find__(t),i=r||{};if(-1===o)throw new Error("Parser rule not found: "+t);this.__rules__.splice(o+1,0,{name:e,enabled:!0,fn:n,alt:i.alt||[]}),this.__cache__=null},r.prototype.push=function(t,e,n){var r=n||{};this.__rules__.push({name:t,enabled:!0,fn:e,alt:r.alt||[]}),this.__cache__=null},r.prototype.enable=function(t,e){Array.isArray(t)||(t=[t]);var n=[];return t.forEach(function(t){var r=this.__find__(t);if(r<0){if(e)return;throw new Error("Rules manager: invalid rule name "+t)}this.__rules__[r].enabled=!0,n.push(t)},this),this.__cache__=null,n},r.prototype.enableOnly=function(t,e){Array.isArray(t)||(t=[t]),this.__rules__.forEach(function(t){t.enabled=!1}),this.enable(t,e)},r.prototype.disable=function(t,e){Array.isArray(t)||(t=[t]);var n=[];return t.forEach(function(t){var r=this.__find__(t);if(r<0){if(e)return;throw new Error("Rules manager: invalid rule name "+t)}this.__rules__[r].enabled=!1,n.push(t)},this),this.__cache__=null,n},r.prototype.getRules=function(t){return null===this.__cache__&&this.__compile__(),this.__cache__[t]||[]},t.exports=r},function(t,e,n){"use strict";function r(t,e,n){this.type=t,this.tag=e,this.attrs=null,this.map=null,this.nesting=n,this.level=0,this.children=null,this.content="",this.markup="",this.info="",this.meta=null,this.block=!1,this.hidden=!1}r.prototype.attrIndex=function(t){var e,n,r;if(!this.attrs)return-1;for(n=0,r=(e=this.attrs).length;n<r;n++)if(e[n][0]===t)return n;return-1},r.prototype.attrPush=function(t){this.attrs?this.attrs.push(t):this.attrs=[t]},r.prototype.attrSet=function(t,e){var n=this.attrIndex(t),r=[t,e];n<0?this.attrPush(r):this.attrs[n]=r},r.prototype.attrGet=function(t){var e=this.attrIndex(t),n=null;return e>=0&&(n=this.attrs[e][1]),n},r.prototype.attrJoin=function(t,e){var n=this.attrIndex(t);n<0?this.attrPush([t,e]):this.attrs[n][1]=this.attrs[n][1]+" "+e},t.exports=r},function(t,e,n){"use strict";e.__esModule=!0,e.default={WHITESPACE:"whitespace",WORD:"word",STRING:"string",RESERVED:"reserved",RESERVED_TOPLEVEL:"reserved-toplevel",RESERVED_NEWLINE:"reserved-newline",OPERATOR:"operator",OPEN_PAREN:"open-paren",CLOSE_PAREN:"close-paren",LINE_COMMENT:"line-comment",BLOCK_COMMENT:"block-comment",NUMBER:"number",PLACEHOLDER:"placeholder"},t.exports=e.default},function(t,e){t.exports=function(t,e){return t===e||t!=t&&e!=e}},function(t,e,n){var r=n(73),o=n(42);t.exports=function(t){return null!=t&&o(t.length)&&!r(t)}},function(t,e){var n=9007199254740991;t.exports=function(t){return"number"==typeof t&&t>-1&&t%1==0&&t<=n}},function(t,e){var n=9007199254740991,r=/^(?:0|[1-9]\d*)$/;t.exports=function(t,e){var o=typeof t;return!!(e=null==e?n:e)&&("number"==o||"symbol"!=o&&r.test(t))&&t>-1&&t%1==0&&t<e}},function(t,e,n){var r=n(12)(n(8),"Map");t.exports=r},function(t,e,n){var r=n(205),o=n(18),i=Object.prototype,a=i.hasOwnProperty,s=i.propertyIsEnumerable,c=r(function(){return arguments}())?r:function(t){return o(t)&&a.call(t,"callee")&&!s.call(t,"callee")};t.exports=c},function(t,e,n){(function(t){var r=n(8),o=n(206),i=e&&!e.nodeType&&e,a=i&&"object"==typeof t&&t&&!t.nodeType&&t,s=a&&a.exports===i?r.Buffer:void 0,c=(s?s.isBuffer:void 0)||o;t.exports=c}).call(this,n(21)(t))},function(t,e,n){var r=n(207),o=n(208),i=n(209),a=i&&i.isTypedArray,s=a?o(a):r;t.exports=s},function(t,e,n){var r=n(216),o=n(228),i=n(230),a=n(231),s=n(232);function c(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}c.prototype.clear=r,c.prototype.delete=o,c.prototype.get=i,c.prototype.has=a,c.prototype.set=s,t.exports=c},function(t,e){t.exports=function(t){var e=-1,n=Array(t.size);return t.forEach(function(t){n[++e]=t}),n}},function(t,e,n){var r=n(243),o=n(74),i=n(41);t.exports=function(t){return i(t)?r(t):o(t)}},function(t,e,n){var r=n(9),o=n(23),i=/\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/,a=/^\w*$/;t.exports=function(t,e){if(r(t))return!1;var n=typeof t;return!("number"!=n&&"symbol"!=n&&"boolean"!=n&&null!=t&&!o(t))||a.test(t)||!i.test(t)||null!=e&&t in Object(e)}},function(t,e,n){"use strict";var r=n(163);function o(t){if("string"!=typeof t)throw new Error("The url must be a string.");var e=r(t),n=e.resource.split("."),i=null;switch(e.toString=function(t){return o.stringify(this,t)},e.source=n.length>2?n.slice(1-n.length).join("."):e.source=e.resource,e.git_suffix=/\.git$/.test(e.pathname),e.name=decodeURIComponent(e.pathname.replace(/^\//,"").replace(/\.git$/,"")),e.owner=decodeURIComponent(e.user),e.source){case"git.cloudforge.com":e.owner=e.user,e.organization=n[0],e.source="cloudforge.com";break;case"visualstudio.com":if("vs-ssh.visualstudio.com"===e.resource){4===(i=e.name.split("/")).length&&(e.organization=i[1],e.owner=i[2],e.name=i[3],e.full_name=i[2]+"/"+i[3]);break}2===(i=e.name.split("/")).length?(e.owner=i[1],e.name=i[1],e.full_name="_git/"+e.name):3===i.length?(e.name=i[2],"DefaultCollection"===i[0]?(e.owner=i[2],e.organization=i[0],e.full_name=e.organization+"/_git/"+e.name):(e.owner=i[0],e.full_name=e.owner+"/_git/"+e.name)):4===i.length&&(e.organization=i[0],e.owner=i[1],e.name=i[3],e.full_name=e.organization+"/"+e.owner+"/_git/"+e.name);break;case"dev.azure.com":case"azure.com":if("ssh.dev.azure.com"===e.resource){4===(i=e.name.split("/")).length&&(e.organization=i[1],e.owner=i[2],e.name=i[3]);break}5===(i=e.name.split("/")).length?(e.organization=i[0],e.owner=i[1],e.name=i[4],e.full_name="_git/"+e.name):3===i.length?(e.name=i[2],"DefaultCollection"===i[0]?(e.owner=i[2],e.organization=i[0],e.full_name=e.organization+"/_git/"+e.name):(e.owner=i[0],e.full_name=e.owner+"/_git/"+e.name)):4===i.length&&(e.organization=i[0],e.owner=i[1],e.name=i[3],e.full_name=e.organization+"/"+e.owner+"/_git/"+e.name);break;default:var a=(i=e.name.split("/")).length-1;if(i.length>=2){var s=i.indexOf("blob",2),c=i.indexOf("tree",2),u=i.indexOf("commit",2);a=s>0?s-1:c>0?c-1:u>0?u-1:a,e.owner=i.slice(0,a).join("/"),e.name=i[a],u&&(e.commit=i[a+2])}e.ref="",e.filepathtype="",e.filepath="",i.length>a+2&&["blob","tree"].indexOf(i[a+1])>=0&&(e.filepathtype=i[a+1],e.ref=i[a+2],i.length>a+3&&(e.filepath=i.slice(a+3).join("/"))),e.organization=e.owner}return e.full_name||(e.full_name=e.owner,e.name&&(e.full_name&&(e.full_name+="/"),e.full_name+=e.name)),e}o.stringify=function(t,e){e=e||(t.protocols&&t.protocols.length?t.protocols.join("+"):t.protocol);var n=t.port?":"+t.port:"",r=t.user||"git",o=t.git_suffix?".git":"";switch(e){case"ssh":return n?"ssh://"+r+"@"+t.resource+n+"/"+t.full_name+o:r+"@"+t.resource+":"+t.full_name+o;case"git+ssh":case"ssh+git":case"ftp":case"ftps":return e+"://"+r+"@"+t.resource+n+"/"+t.full_name+o;case"http":case"https":return e+"://"+(t.token?
/*!
 * buildToken
 * Builds OAuth token prefix (helper function)
 *
 * @name buildToken
 * @function
 * @param {GitUrl} obj The parsed Git url object.
 * @return {String} token prefix
 */
function(t){switch(t.source){case"bitbucket.org":return"x-token-auth:"+t.token+"@";default:return t.token+"@"}}(t):t.user&&(t.protocols.includes("http")||t.protocols.includes("https"))?t.user+"@":"")+t.resource+n+"/"+t.full_name+o;default:return t.href}},t.exports=o},function(t,e,n){(function(t,r){var o;
/**
 * @license
 * Lodash <https://lodash.com/>
 * Copyright OpenJS Foundation and other contributors <https://openjsf.org/>
 * Released under MIT license <https://lodash.com/license>
 * Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE>
 * Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
 */(function(){var i,a=200,s="Unsupported core-js use. Try https://npms.io/search?q=ponyfill.",c="Expected a function",u="__lodash_hash_undefined__",l=500,f="__lodash_placeholder__",p=1,d=2,h=4,m=1,g=2,v=1,b=2,_=4,y=8,E=16,k=32,x=64,w=128,C=256,A=512,T=30,S="...",R=800,O=16,N=1,L=2,I=1/0,D=9007199254740991,M=17976931348623157e292,P=NaN,j=4294967295,U=j-1,F=j>>>1,$=[["ary",w],["bind",v],["bindKey",b],["curry",y],["curryRight",E],["flip",A],["partial",k],["partialRight",x],["rearg",C]],B="[object Arguments]",z="[object Array]",q="[object AsyncFunction]",H="[object Boolean]",G="[object Date]",V="[object DOMException]",W="[object Error]",Y="[object Function]",K="[object GeneratorFunction]",X="[object Map]",Z="[object Number]",J="[object Null]",Q="[object Object]",tt="[object Proxy]",et="[object RegExp]",nt="[object Set]",rt="[object String]",ot="[object Symbol]",it="[object Undefined]",at="[object WeakMap]",st="[object WeakSet]",ct="[object ArrayBuffer]",ut="[object DataView]",lt="[object Float32Array]",ft="[object Float64Array]",pt="[object Int8Array]",dt="[object Int16Array]",ht="[object Int32Array]",mt="[object Uint8Array]",gt="[object Uint8ClampedArray]",vt="[object Uint16Array]",bt="[object Uint32Array]",_t=/\b__p \+= '';/g,yt=/\b(__p \+=) '' \+/g,Et=/(__e\(.*?\)|\b__t\)) \+\n'';/g,kt=/&(?:amp|lt|gt|quot|#39);/g,xt=/[&<>"']/g,wt=RegExp(kt.source),Ct=RegExp(xt.source),At=/<%-([\s\S]+?)%>/g,Tt=/<%([\s\S]+?)%>/g,St=/<%=([\s\S]+?)%>/g,Rt=/\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/,Ot=/^\w*$/,Nt=/[^.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|$))/g,Lt=/[\\^$.*+?()[\]{}|]/g,It=RegExp(Lt.source),Dt=/^\s+|\s+$/g,Mt=/^\s+/,Pt=/\s+$/,jt=/\{(?:\n\/\* \[wrapped with .+\] \*\/)?\n?/,Ut=/\{\n\/\* \[wrapped with (.+)\] \*/,Ft=/,? & /,$t=/[^\x00-\x2f\x3a-\x40\x5b-\x60\x7b-\x7f]+/g,Bt=/\\(\\)?/g,zt=/\$\{([^\\}]*(?:\\.[^\\}]*)*)\}/g,qt=/\w*$/,Ht=/^[-+]0x[0-9a-f]+$/i,Gt=/^0b[01]+$/i,Vt=/^\[object .+?Constructor\]$/,Wt=/^0o[0-7]+$/i,Yt=/^(?:0|[1-9]\d*)$/,Kt=/[\xc0-\xd6\xd8-\xf6\xf8-\xff\u0100-\u017f]/g,Xt=/($^)/,Zt=/['\n\r\u2028\u2029\\]/g,Jt="\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff",Qt="\\xac\\xb1\\xd7\\xf7\\x00-\\x2f\\x3a-\\x40\\x5b-\\x60\\x7b-\\xbf\\u2000-\\u206f \\t\\x0b\\f\\xa0\\ufeff\\n\\r\\u2028\\u2029\\u1680\\u180e\\u2000\\u2001\\u2002\\u2003\\u2004\\u2005\\u2006\\u2007\\u2008\\u2009\\u200a\\u202f\\u205f\\u3000",te="[\\ud800-\\udfff]",ee="["+Qt+"]",ne="["+Jt+"]",re="\\d+",oe="[\\u2700-\\u27bf]",ie="[a-z\\xdf-\\xf6\\xf8-\\xff]",ae="[^\\ud800-\\udfff"+Qt+re+"\\u2700-\\u27bfa-z\\xdf-\\xf6\\xf8-\\xffA-Z\\xc0-\\xd6\\xd8-\\xde]",se="\\ud83c[\\udffb-\\udfff]",ce="[^\\ud800-\\udfff]",ue="(?:\\ud83c[\\udde6-\\uddff]){2}",le="[\\ud800-\\udbff][\\udc00-\\udfff]",fe="[A-Z\\xc0-\\xd6\\xd8-\\xde]",pe="(?:"+ie+"|"+ae+")",de="(?:"+fe+"|"+ae+")",he="(?:"+ne+"|"+se+")"+"?",me="[\\ufe0e\\ufe0f]?"+he+("(?:\\u200d(?:"+[ce,ue,le].join("|")+")[\\ufe0e\\ufe0f]?"+he+")*"),ge="(?:"+[oe,ue,le].join("|")+")"+me,ve="(?:"+[ce+ne+"?",ne,ue,le,te].join("|")+")",be=RegExp("['’]","g"),_e=RegExp(ne,"g"),ye=RegExp(se+"(?="+se+")|"+ve+me,"g"),Ee=RegExp([fe+"?"+ie+"+(?:['’](?:d|ll|m|re|s|t|ve))?(?="+[ee,fe,"$"].join("|")+")",de+"+(?:['’](?:D|LL|M|RE|S|T|VE))?(?="+[ee,fe+pe,"$"].join("|")+")",fe+"?"+pe+"+(?:['’](?:d|ll|m|re|s|t|ve))?",fe+"+(?:['’](?:D|LL|M|RE|S|T|VE))?","\\d*(?:1ST|2ND|3RD|(?![123])\\dTH)(?=\\b|[a-z_])","\\d*(?:1st|2nd|3rd|(?![123])\\dth)(?=\\b|[A-Z_])",re,ge].join("|"),"g"),ke=RegExp("[\\u200d\\ud800-\\udfff"+Jt+"\\ufe0e\\ufe0f]"),xe=/[a-z][A-Z]|[A-Z]{2}[a-z]|[0-9][a-zA-Z]|[a-zA-Z][0-9]|[^a-zA-Z0-9 ]/,we=["Array","Buffer","DataView","Date","Error","Float32Array","Float64Array","Function","Int8Array","Int16Array","Int32Array","Map","Math","Object","Promise","RegExp","Set","String","Symbol","TypeError","Uint8Array","Uint8ClampedArray","Uint16Array","Uint32Array","WeakMap","_","clearTimeout","isFinite","parseInt","setTimeout"],Ce=-1,Ae={};Ae[lt]=Ae[ft]=Ae[pt]=Ae[dt]=Ae[ht]=Ae[mt]=Ae[gt]=Ae[vt]=Ae[bt]=!0,Ae[B]=Ae[z]=Ae[ct]=Ae[H]=Ae[ut]=Ae[G]=Ae[W]=Ae[Y]=Ae[X]=Ae[Z]=Ae[Q]=Ae[et]=Ae[nt]=Ae[rt]=Ae[at]=!1;var Te={};Te[B]=Te[z]=Te[ct]=Te[ut]=Te[H]=Te[G]=Te[lt]=Te[ft]=Te[pt]=Te[dt]=Te[ht]=Te[X]=Te[Z]=Te[Q]=Te[et]=Te[nt]=Te[rt]=Te[ot]=Te[mt]=Te[gt]=Te[vt]=Te[bt]=!0,Te[W]=Te[Y]=Te[at]=!1;var Se={"\\":"\\","'":"'","\n":"n","\r":"r","\u2028":"u2028","\u2029":"u2029"},Re=parseFloat,Oe=parseInt,Ne="object"==typeof t&&t&&t.Object===Object&&t,Le="object"==typeof self&&self&&self.Object===Object&&self,Ie=Ne||Le||Function("return this")(),De=e&&!e.nodeType&&e,Me=De&&"object"==typeof r&&r&&!r.nodeType&&r,Pe=Me&&Me.exports===De,je=Pe&&Ne.process,Ue=function(){try{var t=Me&&Me.require&&Me.require("util").types;return t||je&&je.binding&&je.binding("util")}catch(t){}}(),Fe=Ue&&Ue.isArrayBuffer,$e=Ue&&Ue.isDate,Be=Ue&&Ue.isMap,ze=Ue&&Ue.isRegExp,qe=Ue&&Ue.isSet,He=Ue&&Ue.isTypedArray;function Ge(t,e,n){switch(n.length){case 0:return t.call(e);case 1:return t.call(e,n[0]);case 2:return t.call(e,n[0],n[1]);case 3:return t.call(e,n[0],n[1],n[2])}return t.apply(e,n)}function Ve(t,e,n,r){for(var o=-1,i=null==t?0:t.length;++o<i;){var a=t[o];e(r,a,n(a),t)}return r}function We(t,e){for(var n=-1,r=null==t?0:t.length;++n<r&&!1!==e(t[n],n,t););return t}function Ye(t,e){for(var n=null==t?0:t.length;n--&&!1!==e(t[n],n,t););return t}function Ke(t,e){for(var n=-1,r=null==t?0:t.length;++n<r;)if(!e(t[n],n,t))return!1;return!0}function Xe(t,e){for(var n=-1,r=null==t?0:t.length,o=0,i=[];++n<r;){var a=t[n];e(a,n,t)&&(i[o++]=a)}return i}function Ze(t,e){return!!(null==t?0:t.length)&&cn(t,e,0)>-1}function Je(t,e,n){for(var r=-1,o=null==t?0:t.length;++r<o;)if(n(e,t[r]))return!0;return!1}function Qe(t,e){for(var n=-1,r=null==t?0:t.length,o=Array(r);++n<r;)o[n]=e(t[n],n,t);return o}function tn(t,e){for(var n=-1,r=e.length,o=t.length;++n<r;)t[o+n]=e[n];return t}function en(t,e,n,r){var o=-1,i=null==t?0:t.length;for(r&&i&&(n=t[++o]);++o<i;)n=e(n,t[o],o,t);return n}function nn(t,e,n,r){var o=null==t?0:t.length;for(r&&o&&(n=t[--o]);o--;)n=e(n,t[o],o,t);return n}function rn(t,e){for(var n=-1,r=null==t?0:t.length;++n<r;)if(e(t[n],n,t))return!0;return!1}var on=pn("length");function an(t,e,n){var r;return n(t,function(t,n,o){if(e(t,n,o))return r=n,!1}),r}function sn(t,e,n,r){for(var o=t.length,i=n+(r?1:-1);r?i--:++i<o;)if(e(t[i],i,t))return i;return-1}function cn(t,e,n){return e==e?function(t,e,n){var r=n-1,o=t.length;for(;++r<o;)if(t[r]===e)return r;return-1}(t,e,n):sn(t,ln,n)}function un(t,e,n,r){for(var o=n-1,i=t.length;++o<i;)if(r(t[o],e))return o;return-1}function ln(t){return t!=t}function fn(t,e){var n=null==t?0:t.length;return n?mn(t,e)/n:P}function pn(t){return function(e){return null==e?i:e[t]}}function dn(t){return function(e){return null==t?i:t[e]}}function hn(t,e,n,r,o){return o(t,function(t,o,i){n=r?(r=!1,t):e(n,t,o,i)}),n}function mn(t,e){for(var n,r=-1,o=t.length;++r<o;){var a=e(t[r]);a!==i&&(n=n===i?a:n+a)}return n}function gn(t,e){for(var n=-1,r=Array(t);++n<t;)r[n]=e(n);return r}function vn(t){return function(e){return t(e)}}function bn(t,e){return Qe(e,function(e){return t[e]})}function _n(t,e){return t.has(e)}function yn(t,e){for(var n=-1,r=t.length;++n<r&&cn(e,t[n],0)>-1;);return n}function En(t,e){for(var n=t.length;n--&&cn(e,t[n],0)>-1;);return n}var kn=dn({"À":"A","Á":"A","Â":"A","Ã":"A","Ä":"A","Å":"A","à":"a","á":"a","â":"a","ã":"a","ä":"a","å":"a","Ç":"C","ç":"c","Ð":"D","ð":"d","È":"E","É":"E","Ê":"E","Ë":"E","è":"e","é":"e","ê":"e","ë":"e","Ì":"I","Í":"I","Î":"I","Ï":"I","ì":"i","í":"i","î":"i","ï":"i","Ñ":"N","ñ":"n","Ò":"O","Ó":"O","Ô":"O","Õ":"O","Ö":"O","Ø":"O","ò":"o","ó":"o","ô":"o","õ":"o","ö":"o","ø":"o","Ù":"U","Ú":"U","Û":"U","Ü":"U","ù":"u","ú":"u","û":"u","ü":"u","Ý":"Y","ý":"y","ÿ":"y","Æ":"Ae","æ":"ae","Þ":"Th","þ":"th","ß":"ss","Ā":"A","Ă":"A","Ą":"A","ā":"a","ă":"a","ą":"a","Ć":"C","Ĉ":"C","Ċ":"C","Č":"C","ć":"c","ĉ":"c","ċ":"c","č":"c","Ď":"D","Đ":"D","ď":"d","đ":"d","Ē":"E","Ĕ":"E","Ė":"E","Ę":"E","Ě":"E","ē":"e","ĕ":"e","ė":"e","ę":"e","ě":"e","Ĝ":"G","Ğ":"G","Ġ":"G","Ģ":"G","ĝ":"g","ğ":"g","ġ":"g","ģ":"g","Ĥ":"H","Ħ":"H","ĥ":"h","ħ":"h","Ĩ":"I","Ī":"I","Ĭ":"I","Į":"I","İ":"I","ĩ":"i","ī":"i","ĭ":"i","į":"i","ı":"i","Ĵ":"J","ĵ":"j","Ķ":"K","ķ":"k","ĸ":"k","Ĺ":"L","Ļ":"L","Ľ":"L","Ŀ":"L","Ł":"L","ĺ":"l","ļ":"l","ľ":"l","ŀ":"l","ł":"l","Ń":"N","Ņ":"N","Ň":"N","Ŋ":"N","ń":"n","ņ":"n","ň":"n","ŋ":"n","Ō":"O","Ŏ":"O","Ő":"O","ō":"o","ŏ":"o","ő":"o","Ŕ":"R","Ŗ":"R","Ř":"R","ŕ":"r","ŗ":"r","ř":"r","Ś":"S","Ŝ":"S","Ş":"S","Š":"S","ś":"s","ŝ":"s","ş":"s","š":"s","Ţ":"T","Ť":"T","Ŧ":"T","ţ":"t","ť":"t","ŧ":"t","Ũ":"U","Ū":"U","Ŭ":"U","Ů":"U","Ű":"U","Ų":"U","ũ":"u","ū":"u","ŭ":"u","ů":"u","ű":"u","ų":"u","Ŵ":"W","ŵ":"w","Ŷ":"Y","ŷ":"y","Ÿ":"Y","Ź":"Z","Ż":"Z","Ž":"Z","ź":"z","ż":"z","ž":"z","IJ":"IJ","ij":"ij","Œ":"Oe","œ":"oe","ʼn":"'n","ſ":"s"}),xn=dn({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"});function wn(t){return"\\"+Se[t]}function Cn(t){return ke.test(t)}function An(t){var e=-1,n=Array(t.size);return t.forEach(function(t,r){n[++e]=[r,t]}),n}function Tn(t,e){return function(n){return t(e(n))}}function Sn(t,e){for(var n=-1,r=t.length,o=0,i=[];++n<r;){var a=t[n];a!==e&&a!==f||(t[n]=f,i[o++]=n)}return i}function Rn(t){var e=-1,n=Array(t.size);return t.forEach(function(t){n[++e]=t}),n}function On(t){var e=-1,n=Array(t.size);return t.forEach(function(t){n[++e]=[t,t]}),n}function Nn(t){return Cn(t)?function(t){var e=ye.lastIndex=0;for(;ye.test(t);)++e;return e}(t):on(t)}function Ln(t){return Cn(t)?function(t){return t.match(ye)||[]}(t):function(t){return t.split("")}(t)}var In=dn({"&amp;":"&","&lt;":"<","&gt;":">","&quot;":'"',"&#39;":"'"});var Dn=function t(e){var n,r=(e=null==e?Ie:Dn.defaults(Ie.Object(),e,Dn.pick(Ie,we))).Array,o=e.Date,Jt=e.Error,Qt=e.Function,te=e.Math,ee=e.Object,ne=e.RegExp,re=e.String,oe=e.TypeError,ie=r.prototype,ae=Qt.prototype,se=ee.prototype,ce=e["__core-js_shared__"],ue=ae.toString,le=se.hasOwnProperty,fe=0,pe=(n=/[^.]+$/.exec(ce&&ce.keys&&ce.keys.IE_PROTO||""))?"Symbol(src)_1."+n:"",de=se.toString,he=ue.call(ee),me=Ie._,ge=ne("^"+ue.call(le).replace(Lt,"\\$&").replace(/hasOwnProperty|(function).*?(?=\\\()| for .+?(?=\\\])/g,"$1.*?")+"$"),ve=Pe?e.Buffer:i,ye=e.Symbol,ke=e.Uint8Array,Se=ve?ve.allocUnsafe:i,Ne=Tn(ee.getPrototypeOf,ee),Le=ee.create,De=se.propertyIsEnumerable,Me=ie.splice,je=ye?ye.isConcatSpreadable:i,Ue=ye?ye.iterator:i,on=ye?ye.toStringTag:i,dn=function(){try{var t=Fi(ee,"defineProperty");return t({},"",{}),t}catch(t){}}(),Mn=e.clearTimeout!==Ie.clearTimeout&&e.clearTimeout,Pn=o&&o.now!==Ie.Date.now&&o.now,jn=e.setTimeout!==Ie.setTimeout&&e.setTimeout,Un=te.ceil,Fn=te.floor,$n=ee.getOwnPropertySymbols,Bn=ve?ve.isBuffer:i,zn=e.isFinite,qn=ie.join,Hn=Tn(ee.keys,ee),Gn=te.max,Vn=te.min,Wn=o.now,Yn=e.parseInt,Kn=te.random,Xn=ie.reverse,Zn=Fi(e,"DataView"),Jn=Fi(e,"Map"),Qn=Fi(e,"Promise"),tr=Fi(e,"Set"),er=Fi(e,"WeakMap"),nr=Fi(ee,"create"),rr=er&&new er,or={},ir=fa(Zn),ar=fa(Jn),sr=fa(Qn),cr=fa(tr),ur=fa(er),lr=ye?ye.prototype:i,fr=lr?lr.valueOf:i,pr=lr?lr.toString:i;function dr(t){if(Ss(t)&&!vs(t)&&!(t instanceof vr)){if(t instanceof gr)return t;if(le.call(t,"__wrapped__"))return pa(t)}return new gr(t)}var hr=function(){function t(){}return function(e){if(!Ts(e))return{};if(Le)return Le(e);t.prototype=e;var n=new t;return t.prototype=i,n}}();function mr(){}function gr(t,e){this.__wrapped__=t,this.__actions__=[],this.__chain__=!!e,this.__index__=0,this.__values__=i}function vr(t){this.__wrapped__=t,this.__actions__=[],this.__dir__=1,this.__filtered__=!1,this.__iteratees__=[],this.__takeCount__=j,this.__views__=[]}function br(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}function _r(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}function yr(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}function Er(t){var e=-1,n=null==t?0:t.length;for(this.__data__=new yr;++e<n;)this.add(t[e])}function kr(t){var e=this.__data__=new _r(t);this.size=e.size}function xr(t,e){var n=vs(t),r=!n&&gs(t),o=!n&&!r&&Es(t),i=!n&&!r&&!o&&Ps(t),a=n||r||o||i,s=a?gn(t.length,re):[],c=s.length;for(var u in t)!e&&!le.call(t,u)||a&&("length"==u||o&&("offset"==u||"parent"==u)||i&&("buffer"==u||"byteLength"==u||"byteOffset"==u)||Vi(u,c))||s.push(u);return s}function wr(t){var e=t.length;return e?t[ko(0,e-1)]:i}function Cr(t,e){return ca(ri(t),Dr(e,0,t.length))}function Ar(t){return ca(ri(t))}function Tr(t,e,n){(n===i||ds(t[e],n))&&(n!==i||e in t)||Lr(t,e,n)}function Sr(t,e,n){var r=t[e];le.call(t,e)&&ds(r,n)&&(n!==i||e in t)||Lr(t,e,n)}function Rr(t,e){for(var n=t.length;n--;)if(ds(t[n][0],e))return n;return-1}function Or(t,e,n,r){return Fr(t,function(t,o,i){e(r,t,n(t),i)}),r}function Nr(t,e){return t&&oi(e,oc(e),t)}function Lr(t,e,n){"__proto__"==e&&dn?dn(t,e,{configurable:!0,enumerable:!0,value:n,writable:!0}):t[e]=n}function Ir(t,e){for(var n=-1,o=e.length,a=r(o),s=null==t;++n<o;)a[n]=s?i:Qs(t,e[n]);return a}function Dr(t,e,n){return t==t&&(n!==i&&(t=t<=n?t:n),e!==i&&(t=t>=e?t:e)),t}function Mr(t,e,n,r,o,a){var s,c=e&p,u=e&d,l=e&h;if(n&&(s=o?n(t,r,o,a):n(t)),s!==i)return s;if(!Ts(t))return t;var f=vs(t);if(f){if(s=function(t){var e=t.length,n=new t.constructor(e);return e&&"string"==typeof t[0]&&le.call(t,"index")&&(n.index=t.index,n.input=t.input),n}(t),!c)return ri(t,s)}else{var m=zi(t),g=m==Y||m==K;if(Es(t))return Zo(t,c);if(m==Q||m==B||g&&!o){if(s=u||g?{}:Hi(t),!c)return u?function(t,e){return oi(t,Bi(t),e)}(t,function(t,e){return t&&oi(e,ic(e),t)}(s,t)):function(t,e){return oi(t,$i(t),e)}(t,Nr(s,t))}else{if(!Te[m])return o?t:{};s=function(t,e,n){var r,o=t.constructor;switch(e){case ct:return Jo(t);case H:case G:return new o(+t);case ut:return function(t,e){var n=e?Jo(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.byteLength)}(t,n);case lt:case ft:case pt:case dt:case ht:case mt:case gt:case vt:case bt:return Qo(t,n);case X:return new o;case Z:case rt:return new o(t);case et:return function(t){var e=new t.constructor(t.source,qt.exec(t));return e.lastIndex=t.lastIndex,e}(t);case nt:return new o;case ot:return r=t,fr?ee(fr.call(r)):{}}}(t,m,c)}}a||(a=new kr);var v=a.get(t);if(v)return v;a.set(t,s),Is(t)?t.forEach(function(r){s.add(Mr(r,e,n,r,t,a))}):Rs(t)&&t.forEach(function(r,o){s.set(o,Mr(r,e,n,o,t,a))});var b=f?i:(l?u?Li:Ni:u?ic:oc)(t);return We(b||t,function(r,o){b&&(r=t[o=r]),Sr(s,o,Mr(r,e,n,o,t,a))}),s}function Pr(t,e,n){var r=n.length;if(null==t)return!r;for(t=ee(t);r--;){var o=n[r],a=e[o],s=t[o];if(s===i&&!(o in t)||!a(s))return!1}return!0}function jr(t,e,n){if("function"!=typeof t)throw new oe(c);return oa(function(){t.apply(i,n)},e)}function Ur(t,e,n,r){var o=-1,i=Ze,s=!0,c=t.length,u=[],l=e.length;if(!c)return u;n&&(e=Qe(e,vn(n))),r?(i=Je,s=!1):e.length>=a&&(i=_n,s=!1,e=new Er(e));t:for(;++o<c;){var f=t[o],p=null==n?f:n(f);if(f=r||0!==f?f:0,s&&p==p){for(var d=l;d--;)if(e[d]===p)continue t;u.push(f)}else i(e,p,r)||u.push(f)}return u}dr.templateSettings={escape:At,evaluate:Tt,interpolate:St,variable:"",imports:{_:dr}},dr.prototype=mr.prototype,dr.prototype.constructor=dr,gr.prototype=hr(mr.prototype),gr.prototype.constructor=gr,vr.prototype=hr(mr.prototype),vr.prototype.constructor=vr,br.prototype.clear=function(){this.__data__=nr?nr(null):{},this.size=0},br.prototype.delete=function(t){var e=this.has(t)&&delete this.__data__[t];return this.size-=e?1:0,e},br.prototype.get=function(t){var e=this.__data__;if(nr){var n=e[t];return n===u?i:n}return le.call(e,t)?e[t]:i},br.prototype.has=function(t){var e=this.__data__;return nr?e[t]!==i:le.call(e,t)},br.prototype.set=function(t,e){var n=this.__data__;return this.size+=this.has(t)?0:1,n[t]=nr&&e===i?u:e,this},_r.prototype.clear=function(){this.__data__=[],this.size=0},_r.prototype.delete=function(t){var e=this.__data__,n=Rr(e,t);return!(n<0||(n==e.length-1?e.pop():Me.call(e,n,1),--this.size,0))},_r.prototype.get=function(t){var e=this.__data__,n=Rr(e,t);return n<0?i:e[n][1]},_r.prototype.has=function(t){return Rr(this.__data__,t)>-1},_r.prototype.set=function(t,e){var n=this.__data__,r=Rr(n,t);return r<0?(++this.size,n.push([t,e])):n[r][1]=e,this},yr.prototype.clear=function(){this.size=0,this.__data__={hash:new br,map:new(Jn||_r),string:new br}},yr.prototype.delete=function(t){var e=ji(this,t).delete(t);return this.size-=e?1:0,e},yr.prototype.get=function(t){return ji(this,t).get(t)},yr.prototype.has=function(t){return ji(this,t).has(t)},yr.prototype.set=function(t,e){var n=ji(this,t),r=n.size;return n.set(t,e),this.size+=n.size==r?0:1,this},Er.prototype.add=Er.prototype.push=function(t){return this.__data__.set(t,u),this},Er.prototype.has=function(t){return this.__data__.has(t)},kr.prototype.clear=function(){this.__data__=new _r,this.size=0},kr.prototype.delete=function(t){var e=this.__data__,n=e.delete(t);return this.size=e.size,n},kr.prototype.get=function(t){return this.__data__.get(t)},kr.prototype.has=function(t){return this.__data__.has(t)},kr.prototype.set=function(t,e){var n=this.__data__;if(n instanceof _r){var r=n.__data__;if(!Jn||r.length<a-1)return r.push([t,e]),this.size=++n.size,this;n=this.__data__=new yr(r)}return n.set(t,e),this.size=n.size,this};var Fr=si(Wr),$r=si(Yr,!0);function Br(t,e){var n=!0;return Fr(t,function(t,r,o){return n=!!e(t,r,o)}),n}function zr(t,e,n){for(var r=-1,o=t.length;++r<o;){var a=t[r],s=e(a);if(null!=s&&(c===i?s==s&&!Ms(s):n(s,c)))var c=s,u=a}return u}function qr(t,e){var n=[];return Fr(t,function(t,r,o){e(t,r,o)&&n.push(t)}),n}function Hr(t,e,n,r,o){var i=-1,a=t.length;for(n||(n=Gi),o||(o=[]);++i<a;){var s=t[i];e>0&&n(s)?e>1?Hr(s,e-1,n,r,o):tn(o,s):r||(o[o.length]=s)}return o}var Gr=ci(),Vr=ci(!0);function Wr(t,e){return t&&Gr(t,e,oc)}function Yr(t,e){return t&&Vr(t,e,oc)}function Kr(t,e){return Xe(e,function(e){return ws(t[e])})}function Xr(t,e){for(var n=0,r=(e=Wo(e,t)).length;null!=t&&n<r;)t=t[la(e[n++])];return n&&n==r?t:i}function Zr(t,e,n){var r=e(t);return vs(t)?r:tn(r,n(t))}function Jr(t){return null==t?t===i?it:J:on&&on in ee(t)?function(t){var e=le.call(t,on),n=t[on];try{t[on]=i;var r=!0}catch(t){}var o=de.call(t);return r&&(e?t[on]=n:delete t[on]),o}(t):function(t){return de.call(t)}(t)}function Qr(t,e){return t>e}function to(t,e){return null!=t&&le.call(t,e)}function eo(t,e){return null!=t&&e in ee(t)}function no(t,e,n){for(var o=n?Je:Ze,a=t[0].length,s=t.length,c=s,u=r(s),l=1/0,f=[];c--;){var p=t[c];c&&e&&(p=Qe(p,vn(e))),l=Vn(p.length,l),u[c]=!n&&(e||a>=120&&p.length>=120)?new Er(c&&p):i}p=t[0];var d=-1,h=u[0];t:for(;++d<a&&f.length<l;){var m=p[d],g=e?e(m):m;if(m=n||0!==m?m:0,!(h?_n(h,g):o(f,g,n))){for(c=s;--c;){var v=u[c];if(!(v?_n(v,g):o(t[c],g,n)))continue t}h&&h.push(g),f.push(m)}}return f}function ro(t,e,n){var r=null==(t=ea(t,e=Wo(e,t)))?t:t[la(xa(e))];return null==r?i:Ge(r,t,n)}function oo(t){return Ss(t)&&Jr(t)==B}function io(t,e,n,r,o){return t===e||(null==t||null==e||!Ss(t)&&!Ss(e)?t!=t&&e!=e:function(t,e,n,r,o,a){var s=vs(t),c=vs(e),u=s?z:zi(t),l=c?z:zi(e),f=(u=u==B?Q:u)==Q,p=(l=l==B?Q:l)==Q,d=u==l;if(d&&Es(t)){if(!Es(e))return!1;s=!0,f=!1}if(d&&!f)return a||(a=new kr),s||Ps(t)?Ri(t,e,n,r,o,a):function(t,e,n,r,o,i,a){switch(n){case ut:if(t.byteLength!=e.byteLength||t.byteOffset!=e.byteOffset)return!1;t=t.buffer,e=e.buffer;case ct:return!(t.byteLength!=e.byteLength||!i(new ke(t),new ke(e)));case H:case G:case Z:return ds(+t,+e);case W:return t.name==e.name&&t.message==e.message;case et:case rt:return t==e+"";case X:var s=An;case nt:var c=r&m;if(s||(s=Rn),t.size!=e.size&&!c)return!1;var u=a.get(t);if(u)return u==e;r|=g,a.set(t,e);var l=Ri(s(t),s(e),r,o,i,a);return a.delete(t),l;case ot:if(fr)return fr.call(t)==fr.call(e)}return!1}(t,e,u,n,r,o,a);if(!(n&m)){var h=f&&le.call(t,"__wrapped__"),v=p&&le.call(e,"__wrapped__");if(h||v){var b=h?t.value():t,_=v?e.value():e;return a||(a=new kr),o(b,_,n,r,a)}}return!!d&&(a||(a=new kr),function(t,e,n,r,o,a){var s=n&m,c=Ni(t),u=c.length,l=Ni(e).length;if(u!=l&&!s)return!1;for(var f=u;f--;){var p=c[f];if(!(s?p in e:le.call(e,p)))return!1}var d=a.get(t);if(d&&a.get(e))return d==e;var h=!0;a.set(t,e),a.set(e,t);for(var g=s;++f<u;){p=c[f];var v=t[p],b=e[p];if(r)var _=s?r(b,v,p,e,t,a):r(v,b,p,t,e,a);if(!(_===i?v===b||o(v,b,n,r,a):_)){h=!1;break}g||(g="constructor"==p)}if(h&&!g){var y=t.constructor,E=e.constructor;y!=E&&"constructor"in t&&"constructor"in e&&!("function"==typeof y&&y instanceof y&&"function"==typeof E&&E instanceof E)&&(h=!1)}return a.delete(t),a.delete(e),h}(t,e,n,r,o,a))}(t,e,n,r,io,o))}function ao(t,e,n,r){var o=n.length,a=o,s=!r;if(null==t)return!a;for(t=ee(t);o--;){var c=n[o];if(s&&c[2]?c[1]!==t[c[0]]:!(c[0]in t))return!1}for(;++o<a;){var u=(c=n[o])[0],l=t[u],f=c[1];if(s&&c[2]){if(l===i&&!(u in t))return!1}else{var p=new kr;if(r)var d=r(l,f,u,t,e,p);if(!(d===i?io(f,l,m|g,r,p):d))return!1}}return!0}function so(t){return!(!Ts(t)||(e=t,pe&&pe in e))&&(ws(t)?ge:Vt).test(fa(t));var e}function co(t){return"function"==typeof t?t:null==t?Oc:"object"==typeof t?vs(t)?mo(t[0],t[1]):ho(t):Fc(t)}function uo(t){if(!Zi(t))return Hn(t);var e=[];for(var n in ee(t))le.call(t,n)&&"constructor"!=n&&e.push(n);return e}function lo(t){if(!Ts(t))return function(t){var e=[];if(null!=t)for(var n in ee(t))e.push(n);return e}(t);var e=Zi(t),n=[];for(var r in t)("constructor"!=r||!e&&le.call(t,r))&&n.push(r);return n}function fo(t,e){return t<e}function po(t,e){var n=-1,o=_s(t)?r(t.length):[];return Fr(t,function(t,r,i){o[++n]=e(t,r,i)}),o}function ho(t){var e=Ui(t);return 1==e.length&&e[0][2]?Qi(e[0][0],e[0][1]):function(n){return n===t||ao(n,t,e)}}function mo(t,e){return Yi(t)&&Ji(e)?Qi(la(t),e):function(n){var r=Qs(n,t);return r===i&&r===e?tc(n,t):io(e,r,m|g)}}function go(t,e,n,r,o){t!==e&&Gr(e,function(a,s){if(o||(o=new kr),Ts(a))!function(t,e,n,r,o,a,s){var c=na(t,n),u=na(e,n),l=s.get(u);if(l)Tr(t,n,l);else{var f=a?a(c,u,n+"",t,e,s):i,p=f===i;if(p){var d=vs(u),h=!d&&Es(u),m=!d&&!h&&Ps(u);f=u,d||h||m?vs(c)?f=c:ys(c)?f=ri(c):h?(p=!1,f=Zo(u,!0)):m?(p=!1,f=Qo(u,!0)):f=[]:Ns(u)||gs(u)?(f=c,gs(c)?f=Hs(c):Ts(c)&&!ws(c)||(f=Hi(u))):p=!1}p&&(s.set(u,f),o(f,u,r,a,s),s.delete(u)),Tr(t,n,f)}}(t,e,s,n,go,r,o);else{var c=r?r(na(t,s),a,s+"",t,e,o):i;c===i&&(c=a),Tr(t,s,c)}},ic)}function vo(t,e){var n=t.length;if(n)return Vi(e+=e<0?n:0,n)?t[e]:i}function bo(t,e,n){var r=-1;return e=Qe(e.length?e:[Oc],vn(Pi())),function(t,e){var n=t.length;for(t.sort(e);n--;)t[n]=t[n].value;return t}(po(t,function(t,n,o){return{criteria:Qe(e,function(e){return e(t)}),index:++r,value:t}}),function(t,e){return function(t,e,n){for(var r=-1,o=t.criteria,i=e.criteria,a=o.length,s=n.length;++r<a;){var c=ti(o[r],i[r]);if(c){if(r>=s)return c;var u=n[r];return c*("desc"==u?-1:1)}}return t.index-e.index}(t,e,n)})}function _o(t,e,n){for(var r=-1,o=e.length,i={};++r<o;){var a=e[r],s=Xr(t,a);n(s,a)&&To(i,Wo(a,t),s)}return i}function yo(t,e,n,r){var o=r?un:cn,i=-1,a=e.length,s=t;for(t===e&&(e=ri(e)),n&&(s=Qe(t,vn(n)));++i<a;)for(var c=0,u=e[i],l=n?n(u):u;(c=o(s,l,c,r))>-1;)s!==t&&Me.call(s,c,1),Me.call(t,c,1);return t}function Eo(t,e){for(var n=t?e.length:0,r=n-1;n--;){var o=e[n];if(n==r||o!==i){var i=o;Vi(o)?Me.call(t,o,1):Fo(t,o)}}return t}function ko(t,e){return t+Fn(Kn()*(e-t+1))}function xo(t,e){var n="";if(!t||e<1||e>D)return n;do{e%2&&(n+=t),(e=Fn(e/2))&&(t+=t)}while(e);return n}function wo(t,e){return ia(ta(t,e,Oc),t+"")}function Co(t){return wr(dc(t))}function Ao(t,e){var n=dc(t);return ca(n,Dr(e,0,n.length))}function To(t,e,n,r){if(!Ts(t))return t;for(var o=-1,a=(e=Wo(e,t)).length,s=a-1,c=t;null!=c&&++o<a;){var u=la(e[o]),l=n;if(o!=s){var f=c[u];(l=r?r(f,u,c):i)===i&&(l=Ts(f)?f:Vi(e[o+1])?[]:{})}Sr(c,u,l),c=c[u]}return t}var So=rr?function(t,e){return rr.set(t,e),t}:Oc,Ro=dn?function(t,e){return dn(t,"toString",{configurable:!0,enumerable:!1,value:Tc(e),writable:!0})}:Oc;function Oo(t){return ca(dc(t))}function No(t,e,n){var o=-1,i=t.length;e<0&&(e=-e>i?0:i+e),(n=n>i?i:n)<0&&(n+=i),i=e>n?0:n-e>>>0,e>>>=0;for(var a=r(i);++o<i;)a[o]=t[o+e];return a}function Lo(t,e){var n;return Fr(t,function(t,r,o){return!(n=e(t,r,o))}),!!n}function Io(t,e,n){var r=0,o=null==t?r:t.length;if("number"==typeof e&&e==e&&o<=F){for(;r<o;){var i=r+o>>>1,a=t[i];null!==a&&!Ms(a)&&(n?a<=e:a<e)?r=i+1:o=i}return o}return Do(t,e,Oc,n)}function Do(t,e,n,r){e=n(e);for(var o=0,a=null==t?0:t.length,s=e!=e,c=null===e,u=Ms(e),l=e===i;o<a;){var f=Fn((o+a)/2),p=n(t[f]),d=p!==i,h=null===p,m=p==p,g=Ms(p);if(s)var v=r||m;else v=l?m&&(r||d):c?m&&d&&(r||!h):u?m&&d&&!h&&(r||!g):!h&&!g&&(r?p<=e:p<e);v?o=f+1:a=f}return Vn(a,U)}function Mo(t,e){for(var n=-1,r=t.length,o=0,i=[];++n<r;){var a=t[n],s=e?e(a):a;if(!n||!ds(s,c)){var c=s;i[o++]=0===a?0:a}}return i}function Po(t){return"number"==typeof t?t:Ms(t)?P:+t}function jo(t){if("string"==typeof t)return t;if(vs(t))return Qe(t,jo)+"";if(Ms(t))return pr?pr.call(t):"";var e=t+"";return"0"==e&&1/t==-I?"-0":e}function Uo(t,e,n){var r=-1,o=Ze,i=t.length,s=!0,c=[],u=c;if(n)s=!1,o=Je;else if(i>=a){var l=e?null:xi(t);if(l)return Rn(l);s=!1,o=_n,u=new Er}else u=e?[]:c;t:for(;++r<i;){var f=t[r],p=e?e(f):f;if(f=n||0!==f?f:0,s&&p==p){for(var d=u.length;d--;)if(u[d]===p)continue t;e&&u.push(p),c.push(f)}else o(u,p,n)||(u!==c&&u.push(p),c.push(f))}return c}function Fo(t,e){return null==(t=ea(t,e=Wo(e,t)))||delete t[la(xa(e))]}function $o(t,e,n,r){return To(t,e,n(Xr(t,e)),r)}function Bo(t,e,n,r){for(var o=t.length,i=r?o:-1;(r?i--:++i<o)&&e(t[i],i,t););return n?No(t,r?0:i,r?i+1:o):No(t,r?i+1:0,r?o:i)}function zo(t,e){var n=t;return n instanceof vr&&(n=n.value()),en(e,function(t,e){return e.func.apply(e.thisArg,tn([t],e.args))},n)}function qo(t,e,n){var o=t.length;if(o<2)return o?Uo(t[0]):[];for(var i=-1,a=r(o);++i<o;)for(var s=t[i],c=-1;++c<o;)c!=i&&(a[i]=Ur(a[i]||s,t[c],e,n));return Uo(Hr(a,1),e,n)}function Ho(t,e,n){for(var r=-1,o=t.length,a=e.length,s={};++r<o;){var c=r<a?e[r]:i;n(s,t[r],c)}return s}function Go(t){return ys(t)?t:[]}function Vo(t){return"function"==typeof t?t:Oc}function Wo(t,e){return vs(t)?t:Yi(t,e)?[t]:ua(Gs(t))}var Yo=wo;function Ko(t,e,n){var r=t.length;return n=n===i?r:n,!e&&n>=r?t:No(t,e,n)}var Xo=Mn||function(t){return Ie.clearTimeout(t)};function Zo(t,e){if(e)return t.slice();var n=t.length,r=Se?Se(n):new t.constructor(n);return t.copy(r),r}function Jo(t){var e=new t.constructor(t.byteLength);return new ke(e).set(new ke(t)),e}function Qo(t,e){var n=e?Jo(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.length)}function ti(t,e){if(t!==e){var n=t!==i,r=null===t,o=t==t,a=Ms(t),s=e!==i,c=null===e,u=e==e,l=Ms(e);if(!c&&!l&&!a&&t>e||a&&s&&u&&!c&&!l||r&&s&&u||!n&&u||!o)return 1;if(!r&&!a&&!l&&t<e||l&&n&&o&&!r&&!a||c&&n&&o||!s&&o||!u)return-1}return 0}function ei(t,e,n,o){for(var i=-1,a=t.length,s=n.length,c=-1,u=e.length,l=Gn(a-s,0),f=r(u+l),p=!o;++c<u;)f[c]=e[c];for(;++i<s;)(p||i<a)&&(f[n[i]]=t[i]);for(;l--;)f[c++]=t[i++];return f}function ni(t,e,n,o){for(var i=-1,a=t.length,s=-1,c=n.length,u=-1,l=e.length,f=Gn(a-c,0),p=r(f+l),d=!o;++i<f;)p[i]=t[i];for(var h=i;++u<l;)p[h+u]=e[u];for(;++s<c;)(d||i<a)&&(p[h+n[s]]=t[i++]);return p}function ri(t,e){var n=-1,o=t.length;for(e||(e=r(o));++n<o;)e[n]=t[n];return e}function oi(t,e,n,r){var o=!n;n||(n={});for(var a=-1,s=e.length;++a<s;){var c=e[a],u=r?r(n[c],t[c],c,n,t):i;u===i&&(u=t[c]),o?Lr(n,c,u):Sr(n,c,u)}return n}function ii(t,e){return function(n,r){var o=vs(n)?Ve:Or,i=e?e():{};return o(n,t,Pi(r,2),i)}}function ai(t){return wo(function(e,n){var r=-1,o=n.length,a=o>1?n[o-1]:i,s=o>2?n[2]:i;for(a=t.length>3&&"function"==typeof a?(o--,a):i,s&&Wi(n[0],n[1],s)&&(a=o<3?i:a,o=1),e=ee(e);++r<o;){var c=n[r];c&&t(e,c,r,a)}return e})}function si(t,e){return function(n,r){if(null==n)return n;if(!_s(n))return t(n,r);for(var o=n.length,i=e?o:-1,a=ee(n);(e?i--:++i<o)&&!1!==r(a[i],i,a););return n}}function ci(t){return function(e,n,r){for(var o=-1,i=ee(e),a=r(e),s=a.length;s--;){var c=a[t?s:++o];if(!1===n(i[c],c,i))break}return e}}function ui(t){return function(e){var n=Cn(e=Gs(e))?Ln(e):i,r=n?n[0]:e.charAt(0),o=n?Ko(n,1).join(""):e.slice(1);return r[t]()+o}}function li(t){return function(e){return en(wc(gc(e).replace(be,"")),t,"")}}function fi(t){return function(){var e=arguments;switch(e.length){case 0:return new t;case 1:return new t(e[0]);case 2:return new t(e[0],e[1]);case 3:return new t(e[0],e[1],e[2]);case 4:return new t(e[0],e[1],e[2],e[3]);case 5:return new t(e[0],e[1],e[2],e[3],e[4]);case 6:return new t(e[0],e[1],e[2],e[3],e[4],e[5]);case 7:return new t(e[0],e[1],e[2],e[3],e[4],e[5],e[6])}var n=hr(t.prototype),r=t.apply(n,e);return Ts(r)?r:n}}function pi(t){return function(e,n,r){var o=ee(e);if(!_s(e)){var a=Pi(n,3);e=oc(e),n=function(t){return a(o[t],t,o)}}var s=t(e,n,r);return s>-1?o[a?e[s]:s]:i}}function di(t){return Oi(function(e){var n=e.length,r=n,o=gr.prototype.thru;for(t&&e.reverse();r--;){var a=e[r];if("function"!=typeof a)throw new oe(c);if(o&&!s&&"wrapper"==Di(a))var s=new gr([],!0)}for(r=s?r:n;++r<n;){var u=Di(a=e[r]),l="wrapper"==u?Ii(a):i;s=l&&Ki(l[0])&&l[1]==(w|y|k|C)&&!l[4].length&&1==l[9]?s[Di(l[0])].apply(s,l[3]):1==a.length&&Ki(a)?s[u]():s.thru(a)}return function(){var t=arguments,r=t[0];if(s&&1==t.length&&vs(r))return s.plant(r).value();for(var o=0,i=n?e[o].apply(this,t):r;++o<n;)i=e[o].call(this,i);return i}})}function hi(t,e,n,o,a,s,c,u,l,f){var p=e&w,d=e&v,h=e&b,m=e&(y|E),g=e&A,_=h?i:fi(t);return function v(){for(var b=arguments.length,y=r(b),E=b;E--;)y[E]=arguments[E];if(m)var k=Mi(v),x=function(t,e){for(var n=t.length,r=0;n--;)t[n]===e&&++r;return r}(y,k);if(o&&(y=ei(y,o,a,m)),s&&(y=ni(y,s,c,m)),b-=x,m&&b<f){var w=Sn(y,k);return Ei(t,e,hi,v.placeholder,n,y,w,u,l,f-b)}var C=d?n:this,A=h?C[t]:t;return b=y.length,u?y=function(t,e){for(var n=t.length,r=Vn(e.length,n),o=ri(t);r--;){var a=e[r];t[r]=Vi(a,n)?o[a]:i}return t}(y,u):g&&b>1&&y.reverse(),p&&l<b&&(y.length=l),this&&this!==Ie&&this instanceof v&&(A=_||fi(A)),A.apply(C,y)}}function mi(t,e){return function(n,r){return function(t,e,n,r){return Wr(t,function(t,o,i){e(r,n(t),o,i)}),r}(n,t,e(r),{})}}function gi(t,e){return function(n,r){var o;if(n===i&&r===i)return e;if(n!==i&&(o=n),r!==i){if(o===i)return r;"string"==typeof n||"string"==typeof r?(n=jo(n),r=jo(r)):(n=Po(n),r=Po(r)),o=t(n,r)}return o}}function vi(t){return Oi(function(e){return e=Qe(e,vn(Pi())),wo(function(n){var r=this;return t(e,function(t){return Ge(t,r,n)})})})}function bi(t,e){var n=(e=e===i?" ":jo(e)).length;if(n<2)return n?xo(e,t):e;var r=xo(e,Un(t/Nn(e)));return Cn(e)?Ko(Ln(r),0,t).join(""):r.slice(0,t)}function _i(t){return function(e,n,o){return o&&"number"!=typeof o&&Wi(e,n,o)&&(n=o=i),e=$s(e),n===i?(n=e,e=0):n=$s(n),function(t,e,n,o){for(var i=-1,a=Gn(Un((e-t)/(n||1)),0),s=r(a);a--;)s[o?a:++i]=t,t+=n;return s}(e,n,o=o===i?e<n?1:-1:$s(o),t)}}function yi(t){return function(e,n){return"string"==typeof e&&"string"==typeof n||(e=qs(e),n=qs(n)),t(e,n)}}function Ei(t,e,n,r,o,a,s,c,u,l){var f=e&y;e|=f?k:x,(e&=~(f?x:k))&_||(e&=~(v|b));var p=[t,e,o,f?a:i,f?s:i,f?i:a,f?i:s,c,u,l],d=n.apply(i,p);return Ki(t)&&ra(d,p),d.placeholder=r,aa(d,t,e)}function ki(t){var e=te[t];return function(t,n){if(t=qs(t),(n=null==n?0:Vn(Bs(n),292))&&zn(t)){var r=(Gs(t)+"e").split("e");return+((r=(Gs(e(r[0]+"e"+(+r[1]+n)))+"e").split("e"))[0]+"e"+(+r[1]-n))}return e(t)}}var xi=tr&&1/Rn(new tr([,-0]))[1]==I?function(t){return new tr(t)}:Mc;function wi(t){return function(e){var n=zi(e);return n==X?An(e):n==nt?On(e):function(t,e){return Qe(e,function(e){return[e,t[e]]})}(e,t(e))}}function Ci(t,e,n,o,a,s,u,l){var p=e&b;if(!p&&"function"!=typeof t)throw new oe(c);var d=o?o.length:0;if(d||(e&=~(k|x),o=a=i),u=u===i?u:Gn(Bs(u),0),l=l===i?l:Bs(l),d-=a?a.length:0,e&x){var h=o,m=a;o=a=i}var g=p?i:Ii(t),A=[t,e,n,o,a,h,m,s,u,l];if(g&&function(t,e){var n=t[1],r=e[1],o=n|r,i=o<(v|b|w),a=r==w&&n==y||r==w&&n==C&&t[7].length<=e[8]||r==(w|C)&&e[7].length<=e[8]&&n==y;if(!i&&!a)return t;r&v&&(t[2]=e[2],o|=n&v?0:_);var s=e[3];if(s){var c=t[3];t[3]=c?ei(c,s,e[4]):s,t[4]=c?Sn(t[3],f):e[4]}(s=e[5])&&(c=t[5],t[5]=c?ni(c,s,e[6]):s,t[6]=c?Sn(t[5],f):e[6]),(s=e[7])&&(t[7]=s),r&w&&(t[8]=null==t[8]?e[8]:Vn(t[8],e[8])),null==t[9]&&(t[9]=e[9]),t[0]=e[0],t[1]=o}(A,g),t=A[0],e=A[1],n=A[2],o=A[3],a=A[4],!(l=A[9]=A[9]===i?p?0:t.length:Gn(A[9]-d,0))&&e&(y|E)&&(e&=~(y|E)),e&&e!=v)T=e==y||e==E?function(t,e,n){var o=fi(t);return function a(){for(var s=arguments.length,c=r(s),u=s,l=Mi(a);u--;)c[u]=arguments[u];var f=s<3&&c[0]!==l&&c[s-1]!==l?[]:Sn(c,l);return(s-=f.length)<n?Ei(t,e,hi,a.placeholder,i,c,f,i,i,n-s):Ge(this&&this!==Ie&&this instanceof a?o:t,this,c)}}(t,e,l):e!=k&&e!=(v|k)||a.length?hi.apply(i,A):function(t,e,n,o){var i=e&v,a=fi(t);return function e(){for(var s=-1,c=arguments.length,u=-1,l=o.length,f=r(l+c),p=this&&this!==Ie&&this instanceof e?a:t;++u<l;)f[u]=o[u];for(;c--;)f[u++]=arguments[++s];return Ge(p,i?n:this,f)}}(t,e,n,o);else var T=function(t,e,n){var r=e&v,o=fi(t);return function e(){return(this&&this!==Ie&&this instanceof e?o:t).apply(r?n:this,arguments)}}(t,e,n);return aa((g?So:ra)(T,A),t,e)}function Ai(t,e,n,r){return t===i||ds(t,se[n])&&!le.call(r,n)?e:t}function Ti(t,e,n,r,o,a){return Ts(t)&&Ts(e)&&(a.set(e,t),go(t,e,i,Ti,a),a.delete(e)),t}function Si(t){return Ns(t)?i:t}function Ri(t,e,n,r,o,a){var s=n&m,c=t.length,u=e.length;if(c!=u&&!(s&&u>c))return!1;var l=a.get(t);if(l&&a.get(e))return l==e;var f=-1,p=!0,d=n&g?new Er:i;for(a.set(t,e),a.set(e,t);++f<c;){var h=t[f],v=e[f];if(r)var b=s?r(v,h,f,e,t,a):r(h,v,f,t,e,a);if(b!==i){if(b)continue;p=!1;break}if(d){if(!rn(e,function(t,e){if(!_n(d,e)&&(h===t||o(h,t,n,r,a)))return d.push(e)})){p=!1;break}}else if(h!==v&&!o(h,v,n,r,a)){p=!1;break}}return a.delete(t),a.delete(e),p}function Oi(t){return ia(ta(t,i,ba),t+"")}function Ni(t){return Zr(t,oc,$i)}function Li(t){return Zr(t,ic,Bi)}var Ii=rr?function(t){return rr.get(t)}:Mc;function Di(t){for(var e=t.name+"",n=or[e],r=le.call(or,e)?n.length:0;r--;){var o=n[r],i=o.func;if(null==i||i==t)return o.name}return e}function Mi(t){return(le.call(dr,"placeholder")?dr:t).placeholder}function Pi(){var t=dr.iteratee||Nc;return t=t===Nc?co:t,arguments.length?t(arguments[0],arguments[1]):t}function ji(t,e){var n,r,o=t.__data__;return("string"==(r=typeof(n=e))||"number"==r||"symbol"==r||"boolean"==r?"__proto__"!==n:null===n)?o["string"==typeof e?"string":"hash"]:o.map}function Ui(t){for(var e=oc(t),n=e.length;n--;){var r=e[n],o=t[r];e[n]=[r,o,Ji(o)]}return e}function Fi(t,e){var n=function(t,e){return null==t?i:t[e]}(t,e);return so(n)?n:i}var $i=$n?function(t){return null==t?[]:(t=ee(t),Xe($n(t),function(e){return De.call(t,e)}))}:zc,Bi=$n?function(t){for(var e=[];t;)tn(e,$i(t)),t=Ne(t);return e}:zc,zi=Jr;function qi(t,e,n){for(var r=-1,o=(e=Wo(e,t)).length,i=!1;++r<o;){var a=la(e[r]);if(!(i=null!=t&&n(t,a)))break;t=t[a]}return i||++r!=o?i:!!(o=null==t?0:t.length)&&As(o)&&Vi(a,o)&&(vs(t)||gs(t))}function Hi(t){return"function"!=typeof t.constructor||Zi(t)?{}:hr(Ne(t))}function Gi(t){return vs(t)||gs(t)||!!(je&&t&&t[je])}function Vi(t,e){var n=typeof t;return!!(e=null==e?D:e)&&("number"==n||"symbol"!=n&&Yt.test(t))&&t>-1&&t%1==0&&t<e}function Wi(t,e,n){if(!Ts(n))return!1;var r=typeof e;return!!("number"==r?_s(n)&&Vi(e,n.length):"string"==r&&e in n)&&ds(n[e],t)}function Yi(t,e){if(vs(t))return!1;var n=typeof t;return!("number"!=n&&"symbol"!=n&&"boolean"!=n&&null!=t&&!Ms(t))||Ot.test(t)||!Rt.test(t)||null!=e&&t in ee(e)}function Ki(t){var e=Di(t),n=dr[e];if("function"!=typeof n||!(e in vr.prototype))return!1;if(t===n)return!0;var r=Ii(n);return!!r&&t===r[0]}(Zn&&zi(new Zn(new ArrayBuffer(1)))!=ut||Jn&&zi(new Jn)!=X||Qn&&"[object Promise]"!=zi(Qn.resolve())||tr&&zi(new tr)!=nt||er&&zi(new er)!=at)&&(zi=function(t){var e=Jr(t),n=e==Q?t.constructor:i,r=n?fa(n):"";if(r)switch(r){case ir:return ut;case ar:return X;case sr:return"[object Promise]";case cr:return nt;case ur:return at}return e});var Xi=ce?ws:qc;function Zi(t){var e=t&&t.constructor;return t===("function"==typeof e&&e.prototype||se)}function Ji(t){return t==t&&!Ts(t)}function Qi(t,e){return function(n){return null!=n&&n[t]===e&&(e!==i||t in ee(n))}}function ta(t,e,n){return e=Gn(e===i?t.length-1:e,0),function(){for(var o=arguments,i=-1,a=Gn(o.length-e,0),s=r(a);++i<a;)s[i]=o[e+i];i=-1;for(var c=r(e+1);++i<e;)c[i]=o[i];return c[e]=n(s),Ge(t,this,c)}}function ea(t,e){return e.length<2?t:Xr(t,No(e,0,-1))}function na(t,e){if(("constructor"!==e||"function"!=typeof t[e])&&"__proto__"!=e)return t[e]}var ra=sa(So),oa=jn||function(t,e){return Ie.setTimeout(t,e)},ia=sa(Ro);function aa(t,e,n){var r=e+"";return ia(t,function(t,e){var n=e.length;if(!n)return t;var r=n-1;return e[r]=(n>1?"& ":"")+e[r],e=e.join(n>2?", ":" "),t.replace(jt,"{\n/* [wrapped with "+e+"] */\n")}(r,function(t,e){return We($,function(n){var r="_."+n[0];e&n[1]&&!Ze(t,r)&&t.push(r)}),t.sort()}(function(t){var e=t.match(Ut);return e?e[1].split(Ft):[]}(r),n)))}function sa(t){var e=0,n=0;return function(){var r=Wn(),o=O-(r-n);if(n=r,o>0){if(++e>=R)return arguments[0]}else e=0;return t.apply(i,arguments)}}function ca(t,e){var n=-1,r=t.length,o=r-1;for(e=e===i?r:e;++n<e;){var a=ko(n,o),s=t[a];t[a]=t[n],t[n]=s}return t.length=e,t}var ua=function(t){var e=ss(t,function(t){return n.size===l&&n.clear(),t}),n=e.cache;return e}(function(t){var e=[];return 46===t.charCodeAt(0)&&e.push(""),t.replace(Nt,function(t,n,r,o){e.push(r?o.replace(Bt,"$1"):n||t)}),e});function la(t){if("string"==typeof t||Ms(t))return t;var e=t+"";return"0"==e&&1/t==-I?"-0":e}function fa(t){if(null!=t){try{return ue.call(t)}catch(t){}try{return t+""}catch(t){}}return""}function pa(t){if(t instanceof vr)return t.clone();var e=new gr(t.__wrapped__,t.__chain__);return e.__actions__=ri(t.__actions__),e.__index__=t.__index__,e.__values__=t.__values__,e}var da=wo(function(t,e){return ys(t)?Ur(t,Hr(e,1,ys,!0)):[]}),ha=wo(function(t,e){var n=xa(e);return ys(n)&&(n=i),ys(t)?Ur(t,Hr(e,1,ys,!0),Pi(n,2)):[]}),ma=wo(function(t,e){var n=xa(e);return ys(n)&&(n=i),ys(t)?Ur(t,Hr(e,1,ys,!0),i,n):[]});function ga(t,e,n){var r=null==t?0:t.length;if(!r)return-1;var o=null==n?0:Bs(n);return o<0&&(o=Gn(r+o,0)),sn(t,Pi(e,3),o)}function va(t,e,n){var r=null==t?0:t.length;if(!r)return-1;var o=r-1;return n!==i&&(o=Bs(n),o=n<0?Gn(r+o,0):Vn(o,r-1)),sn(t,Pi(e,3),o,!0)}function ba(t){return null!=t&&t.length?Hr(t,1):[]}function _a(t){return t&&t.length?t[0]:i}var ya=wo(function(t){var e=Qe(t,Go);return e.length&&e[0]===t[0]?no(e):[]}),Ea=wo(function(t){var e=xa(t),n=Qe(t,Go);return e===xa(n)?e=i:n.pop(),n.length&&n[0]===t[0]?no(n,Pi(e,2)):[]}),ka=wo(function(t){var e=xa(t),n=Qe(t,Go);return(e="function"==typeof e?e:i)&&n.pop(),n.length&&n[0]===t[0]?no(n,i,e):[]});function xa(t){var e=null==t?0:t.length;return e?t[e-1]:i}var wa=wo(Ca);function Ca(t,e){return t&&t.length&&e&&e.length?yo(t,e):t}var Aa=Oi(function(t,e){var n=null==t?0:t.length,r=Ir(t,e);return Eo(t,Qe(e,function(t){return Vi(t,n)?+t:t}).sort(ti)),r});function Ta(t){return null==t?t:Xn.call(t)}var Sa=wo(function(t){return Uo(Hr(t,1,ys,!0))}),Ra=wo(function(t){var e=xa(t);return ys(e)&&(e=i),Uo(Hr(t,1,ys,!0),Pi(e,2))}),Oa=wo(function(t){var e=xa(t);return e="function"==typeof e?e:i,Uo(Hr(t,1,ys,!0),i,e)});function Na(t){if(!t||!t.length)return[];var e=0;return t=Xe(t,function(t){if(ys(t))return e=Gn(t.length,e),!0}),gn(e,function(e){return Qe(t,pn(e))})}function La(t,e){if(!t||!t.length)return[];var n=Na(t);return null==e?n:Qe(n,function(t){return Ge(e,i,t)})}var Ia=wo(function(t,e){return ys(t)?Ur(t,e):[]}),Da=wo(function(t){return qo(Xe(t,ys))}),Ma=wo(function(t){var e=xa(t);return ys(e)&&(e=i),qo(Xe(t,ys),Pi(e,2))}),Pa=wo(function(t){var e=xa(t);return e="function"==typeof e?e:i,qo(Xe(t,ys),i,e)}),ja=wo(Na);var Ua=wo(function(t){var e=t.length,n=e>1?t[e-1]:i;return n="function"==typeof n?(t.pop(),n):i,La(t,n)});function Fa(t){var e=dr(t);return e.__chain__=!0,e}function $a(t,e){return e(t)}var Ba=Oi(function(t){var e=t.length,n=e?t[0]:0,r=this.__wrapped__,o=function(e){return Ir(e,t)};return!(e>1||this.__actions__.length)&&r instanceof vr&&Vi(n)?((r=r.slice(n,+n+(e?1:0))).__actions__.push({func:$a,args:[o],thisArg:i}),new gr(r,this.__chain__).thru(function(t){return e&&!t.length&&t.push(i),t})):this.thru(o)});var za=ii(function(t,e,n){le.call(t,n)?++t[n]:Lr(t,n,1)});var qa=pi(ga),Ha=pi(va);function Ga(t,e){return(vs(t)?We:Fr)(t,Pi(e,3))}function Va(t,e){return(vs(t)?Ye:$r)(t,Pi(e,3))}var Wa=ii(function(t,e,n){le.call(t,n)?t[n].push(e):Lr(t,n,[e])});var Ya=wo(function(t,e,n){var o=-1,i="function"==typeof e,a=_s(t)?r(t.length):[];return Fr(t,function(t){a[++o]=i?Ge(e,t,n):ro(t,e,n)}),a}),Ka=ii(function(t,e,n){Lr(t,n,e)});function Xa(t,e){return(vs(t)?Qe:po)(t,Pi(e,3))}var Za=ii(function(t,e,n){t[n?0:1].push(e)},function(){return[[],[]]});var Ja=wo(function(t,e){if(null==t)return[];var n=e.length;return n>1&&Wi(t,e[0],e[1])?e=[]:n>2&&Wi(e[0],e[1],e[2])&&(e=[e[0]]),bo(t,Hr(e,1),[])}),Qa=Pn||function(){return Ie.Date.now()};function ts(t,e,n){return e=n?i:e,e=t&&null==e?t.length:e,Ci(t,w,i,i,i,i,e)}function es(t,e){var n;if("function"!=typeof e)throw new oe(c);return t=Bs(t),function(){return--t>0&&(n=e.apply(this,arguments)),t<=1&&(e=i),n}}var ns=wo(function(t,e,n){var r=v;if(n.length){var o=Sn(n,Mi(ns));r|=k}return Ci(t,r,e,n,o)}),rs=wo(function(t,e,n){var r=v|b;if(n.length){var o=Sn(n,Mi(rs));r|=k}return Ci(e,r,t,n,o)});function os(t,e,n){var r,o,a,s,u,l,f=0,p=!1,d=!1,h=!0;if("function"!=typeof t)throw new oe(c);function m(e){var n=r,a=o;return r=o=i,f=e,s=t.apply(a,n)}function g(t){var n=t-l;return l===i||n>=e||n<0||d&&t-f>=a}function v(){var t=Qa();if(g(t))return b(t);u=oa(v,function(t){var n=e-(t-l);return d?Vn(n,a-(t-f)):n}(t))}function b(t){return u=i,h&&r?m(t):(r=o=i,s)}function _(){var t=Qa(),n=g(t);if(r=arguments,o=this,l=t,n){if(u===i)return function(t){return f=t,u=oa(v,e),p?m(t):s}(l);if(d)return Xo(u),u=oa(v,e),m(l)}return u===i&&(u=oa(v,e)),s}return e=qs(e)||0,Ts(n)&&(p=!!n.leading,a=(d="maxWait"in n)?Gn(qs(n.maxWait)||0,e):a,h="trailing"in n?!!n.trailing:h),_.cancel=function(){u!==i&&Xo(u),f=0,r=l=o=u=i},_.flush=function(){return u===i?s:b(Qa())},_}var is=wo(function(t,e){return jr(t,1,e)}),as=wo(function(t,e,n){return jr(t,qs(e)||0,n)});function ss(t,e){if("function"!=typeof t||null!=e&&"function"!=typeof e)throw new oe(c);var n=function(){var r=arguments,o=e?e.apply(this,r):r[0],i=n.cache;if(i.has(o))return i.get(o);var a=t.apply(this,r);return n.cache=i.set(o,a)||i,a};return n.cache=new(ss.Cache||yr),n}function cs(t){if("function"!=typeof t)throw new oe(c);return function(){var e=arguments;switch(e.length){case 0:return!t.call(this);case 1:return!t.call(this,e[0]);case 2:return!t.call(this,e[0],e[1]);case 3:return!t.call(this,e[0],e[1],e[2])}return!t.apply(this,e)}}ss.Cache=yr;var us=Yo(function(t,e){var n=(e=1==e.length&&vs(e[0])?Qe(e[0],vn(Pi())):Qe(Hr(e,1),vn(Pi()))).length;return wo(function(r){for(var o=-1,i=Vn(r.length,n);++o<i;)r[o]=e[o].call(this,r[o]);return Ge(t,this,r)})}),ls=wo(function(t,e){var n=Sn(e,Mi(ls));return Ci(t,k,i,e,n)}),fs=wo(function(t,e){var n=Sn(e,Mi(fs));return Ci(t,x,i,e,n)}),ps=Oi(function(t,e){return Ci(t,C,i,i,i,e)});function ds(t,e){return t===e||t!=t&&e!=e}var hs=yi(Qr),ms=yi(function(t,e){return t>=e}),gs=oo(function(){return arguments}())?oo:function(t){return Ss(t)&&le.call(t,"callee")&&!De.call(t,"callee")},vs=r.isArray,bs=Fe?vn(Fe):function(t){return Ss(t)&&Jr(t)==ct};function _s(t){return null!=t&&As(t.length)&&!ws(t)}function ys(t){return Ss(t)&&_s(t)}var Es=Bn||qc,ks=$e?vn($e):function(t){return Ss(t)&&Jr(t)==G};function xs(t){if(!Ss(t))return!1;var e=Jr(t);return e==W||e==V||"string"==typeof t.message&&"string"==typeof t.name&&!Ns(t)}function ws(t){if(!Ts(t))return!1;var e=Jr(t);return e==Y||e==K||e==q||e==tt}function Cs(t){return"number"==typeof t&&t==Bs(t)}function As(t){return"number"==typeof t&&t>-1&&t%1==0&&t<=D}function Ts(t){var e=typeof t;return null!=t&&("object"==e||"function"==e)}function Ss(t){return null!=t&&"object"==typeof t}var Rs=Be?vn(Be):function(t){return Ss(t)&&zi(t)==X};function Os(t){return"number"==typeof t||Ss(t)&&Jr(t)==Z}function Ns(t){if(!Ss(t)||Jr(t)!=Q)return!1;var e=Ne(t);if(null===e)return!0;var n=le.call(e,"constructor")&&e.constructor;return"function"==typeof n&&n instanceof n&&ue.call(n)==he}var Ls=ze?vn(ze):function(t){return Ss(t)&&Jr(t)==et};var Is=qe?vn(qe):function(t){return Ss(t)&&zi(t)==nt};function Ds(t){return"string"==typeof t||!vs(t)&&Ss(t)&&Jr(t)==rt}function Ms(t){return"symbol"==typeof t||Ss(t)&&Jr(t)==ot}var Ps=He?vn(He):function(t){return Ss(t)&&As(t.length)&&!!Ae[Jr(t)]};var js=yi(fo),Us=yi(function(t,e){return t<=e});function Fs(t){if(!t)return[];if(_s(t))return Ds(t)?Ln(t):ri(t);if(Ue&&t[Ue])return function(t){for(var e,n=[];!(e=t.next()).done;)n.push(e.value);return n}(t[Ue]());var e=zi(t);return(e==X?An:e==nt?Rn:dc)(t)}function $s(t){return t?(t=qs(t))===I||t===-I?(t<0?-1:1)*M:t==t?t:0:0===t?t:0}function Bs(t){var e=$s(t),n=e%1;return e==e?n?e-n:e:0}function zs(t){return t?Dr(Bs(t),0,j):0}function qs(t){if("number"==typeof t)return t;if(Ms(t))return P;if(Ts(t)){var e="function"==typeof t.valueOf?t.valueOf():t;t=Ts(e)?e+"":e}if("string"!=typeof t)return 0===t?t:+t;t=t.replace(Dt,"");var n=Gt.test(t);return n||Wt.test(t)?Oe(t.slice(2),n?2:8):Ht.test(t)?P:+t}function Hs(t){return oi(t,ic(t))}function Gs(t){return null==t?"":jo(t)}var Vs=ai(function(t,e){if(Zi(e)||_s(e))oi(e,oc(e),t);else for(var n in e)le.call(e,n)&&Sr(t,n,e[n])}),Ws=ai(function(t,e){oi(e,ic(e),t)}),Ys=ai(function(t,e,n,r){oi(e,ic(e),t,r)}),Ks=ai(function(t,e,n,r){oi(e,oc(e),t,r)}),Xs=Oi(Ir);var Zs=wo(function(t,e){t=ee(t);var n=-1,r=e.length,o=r>2?e[2]:i;for(o&&Wi(e[0],e[1],o)&&(r=1);++n<r;)for(var a=e[n],s=ic(a),c=-1,u=s.length;++c<u;){var l=s[c],f=t[l];(f===i||ds(f,se[l])&&!le.call(t,l))&&(t[l]=a[l])}return t}),Js=wo(function(t){return t.push(i,Ti),Ge(sc,i,t)});function Qs(t,e,n){var r=null==t?i:Xr(t,e);return r===i?n:r}function tc(t,e){return null!=t&&qi(t,e,eo)}var ec=mi(function(t,e,n){null!=e&&"function"!=typeof e.toString&&(e=de.call(e)),t[e]=n},Tc(Oc)),nc=mi(function(t,e,n){null!=e&&"function"!=typeof e.toString&&(e=de.call(e)),le.call(t,e)?t[e].push(n):t[e]=[n]},Pi),rc=wo(ro);function oc(t){return _s(t)?xr(t):uo(t)}function ic(t){return _s(t)?xr(t,!0):lo(t)}var ac=ai(function(t,e,n){go(t,e,n)}),sc=ai(function(t,e,n,r){go(t,e,n,r)}),cc=Oi(function(t,e){var n={};if(null==t)return n;var r=!1;e=Qe(e,function(e){return e=Wo(e,t),r||(r=e.length>1),e}),oi(t,Li(t),n),r&&(n=Mr(n,p|d|h,Si));for(var o=e.length;o--;)Fo(n,e[o]);return n});var uc=Oi(function(t,e){return null==t?{}:function(t,e){return _o(t,e,function(e,n){return tc(t,n)})}(t,e)});function lc(t,e){if(null==t)return{};var n=Qe(Li(t),function(t){return[t]});return e=Pi(e),_o(t,n,function(t,n){return e(t,n[0])})}var fc=wi(oc),pc=wi(ic);function dc(t){return null==t?[]:bn(t,oc(t))}var hc=li(function(t,e,n){return e=e.toLowerCase(),t+(n?mc(e):e)});function mc(t){return xc(Gs(t).toLowerCase())}function gc(t){return(t=Gs(t))&&t.replace(Kt,kn).replace(_e,"")}var vc=li(function(t,e,n){return t+(n?"-":"")+e.toLowerCase()}),bc=li(function(t,e,n){return t+(n?" ":"")+e.toLowerCase()}),_c=ui("toLowerCase");var yc=li(function(t,e,n){return t+(n?"_":"")+e.toLowerCase()});var Ec=li(function(t,e,n){return t+(n?" ":"")+xc(e)});var kc=li(function(t,e,n){return t+(n?" ":"")+e.toUpperCase()}),xc=ui("toUpperCase");function wc(t,e,n){return t=Gs(t),(e=n?i:e)===i?function(t){return xe.test(t)}(t)?function(t){return t.match(Ee)||[]}(t):function(t){return t.match($t)||[]}(t):t.match(e)||[]}var Cc=wo(function(t,e){try{return Ge(t,i,e)}catch(t){return xs(t)?t:new Jt(t)}}),Ac=Oi(function(t,e){return We(e,function(e){e=la(e),Lr(t,e,ns(t[e],t))}),t});function Tc(t){return function(){return t}}var Sc=di(),Rc=di(!0);function Oc(t){return t}function Nc(t){return co("function"==typeof t?t:Mr(t,p))}var Lc=wo(function(t,e){return function(n){return ro(n,t,e)}}),Ic=wo(function(t,e){return function(n){return ro(t,n,e)}});function Dc(t,e,n){var r=oc(e),o=Kr(e,r);null!=n||Ts(e)&&(o.length||!r.length)||(n=e,e=t,t=this,o=Kr(e,oc(e)));var i=!(Ts(n)&&"chain"in n&&!n.chain),a=ws(t);return We(o,function(n){var r=e[n];t[n]=r,a&&(t.prototype[n]=function(){var e=this.__chain__;if(i||e){var n=t(this.__wrapped__),o=n.__actions__=ri(this.__actions__);return o.push({func:r,args:arguments,thisArg:t}),n.__chain__=e,n}return r.apply(t,tn([this.value()],arguments))})}),t}function Mc(){}var Pc=vi(Qe),jc=vi(Ke),Uc=vi(rn);function Fc(t){return Yi(t)?pn(la(t)):function(t){return function(e){return Xr(e,t)}}(t)}var $c=_i(),Bc=_i(!0);function zc(){return[]}function qc(){return!1}var Hc=gi(function(t,e){return t+e},0),Gc=ki("ceil"),Vc=gi(function(t,e){return t/e},1),Wc=ki("floor");var Yc,Kc=gi(function(t,e){return t*e},1),Xc=ki("round"),Zc=gi(function(t,e){return t-e},0);return dr.after=function(t,e){if("function"!=typeof e)throw new oe(c);return t=Bs(t),function(){if(--t<1)return e.apply(this,arguments)}},dr.ary=ts,dr.assign=Vs,dr.assignIn=Ws,dr.assignInWith=Ys,dr.assignWith=Ks,dr.at=Xs,dr.before=es,dr.bind=ns,dr.bindAll=Ac,dr.bindKey=rs,dr.castArray=function(){if(!arguments.length)return[];var t=arguments[0];return vs(t)?t:[t]},dr.chain=Fa,dr.chunk=function(t,e,n){e=(n?Wi(t,e,n):e===i)?1:Gn(Bs(e),0);var o=null==t?0:t.length;if(!o||e<1)return[];for(var a=0,s=0,c=r(Un(o/e));a<o;)c[s++]=No(t,a,a+=e);return c},dr.compact=function(t){for(var e=-1,n=null==t?0:t.length,r=0,o=[];++e<n;){var i=t[e];i&&(o[r++]=i)}return o},dr.concat=function(){var t=arguments.length;if(!t)return[];for(var e=r(t-1),n=arguments[0],o=t;o--;)e[o-1]=arguments[o];return tn(vs(n)?ri(n):[n],Hr(e,1))},dr.cond=function(t){var e=null==t?0:t.length,n=Pi();return t=e?Qe(t,function(t){if("function"!=typeof t[1])throw new oe(c);return[n(t[0]),t[1]]}):[],wo(function(n){for(var r=-1;++r<e;){var o=t[r];if(Ge(o[0],this,n))return Ge(o[1],this,n)}})},dr.conforms=function(t){return function(t){var e=oc(t);return function(n){return Pr(n,t,e)}}(Mr(t,p))},dr.constant=Tc,dr.countBy=za,dr.create=function(t,e){var n=hr(t);return null==e?n:Nr(n,e)},dr.curry=function t(e,n,r){var o=Ci(e,y,i,i,i,i,i,n=r?i:n);return o.placeholder=t.placeholder,o},dr.curryRight=function t(e,n,r){var o=Ci(e,E,i,i,i,i,i,n=r?i:n);return o.placeholder=t.placeholder,o},dr.debounce=os,dr.defaults=Zs,dr.defaultsDeep=Js,dr.defer=is,dr.delay=as,dr.difference=da,dr.differenceBy=ha,dr.differenceWith=ma,dr.drop=function(t,e,n){var r=null==t?0:t.length;return r?No(t,(e=n||e===i?1:Bs(e))<0?0:e,r):[]},dr.dropRight=function(t,e,n){var r=null==t?0:t.length;return r?No(t,0,(e=r-(e=n||e===i?1:Bs(e)))<0?0:e):[]},dr.dropRightWhile=function(t,e){return t&&t.length?Bo(t,Pi(e,3),!0,!0):[]},dr.dropWhile=function(t,e){return t&&t.length?Bo(t,Pi(e,3),!0):[]},dr.fill=function(t,e,n,r){var o=null==t?0:t.length;return o?(n&&"number"!=typeof n&&Wi(t,e,n)&&(n=0,r=o),function(t,e,n,r){var o=t.length;for((n=Bs(n))<0&&(n=-n>o?0:o+n),(r=r===i||r>o?o:Bs(r))<0&&(r+=o),r=n>r?0:zs(r);n<r;)t[n++]=e;return t}(t,e,n,r)):[]},dr.filter=function(t,e){return(vs(t)?Xe:qr)(t,Pi(e,3))},dr.flatMap=function(t,e){return Hr(Xa(t,e),1)},dr.flatMapDeep=function(t,e){return Hr(Xa(t,e),I)},dr.flatMapDepth=function(t,e,n){return n=n===i?1:Bs(n),Hr(Xa(t,e),n)},dr.flatten=ba,dr.flattenDeep=function(t){return null!=t&&t.length?Hr(t,I):[]},dr.flattenDepth=function(t,e){return null!=t&&t.length?Hr(t,e=e===i?1:Bs(e)):[]},dr.flip=function(t){return Ci(t,A)},dr.flow=Sc,dr.flowRight=Rc,dr.fromPairs=function(t){for(var e=-1,n=null==t?0:t.length,r={};++e<n;){var o=t[e];r[o[0]]=o[1]}return r},dr.functions=function(t){return null==t?[]:Kr(t,oc(t))},dr.functionsIn=function(t){return null==t?[]:Kr(t,ic(t))},dr.groupBy=Wa,dr.initial=function(t){return null!=t&&t.length?No(t,0,-1):[]},dr.intersection=ya,dr.intersectionBy=Ea,dr.intersectionWith=ka,dr.invert=ec,dr.invertBy=nc,dr.invokeMap=Ya,dr.iteratee=Nc,dr.keyBy=Ka,dr.keys=oc,dr.keysIn=ic,dr.map=Xa,dr.mapKeys=function(t,e){var n={};return e=Pi(e,3),Wr(t,function(t,r,o){Lr(n,e(t,r,o),t)}),n},dr.mapValues=function(t,e){var n={};return e=Pi(e,3),Wr(t,function(t,r,o){Lr(n,r,e(t,r,o))}),n},dr.matches=function(t){return ho(Mr(t,p))},dr.matchesProperty=function(t,e){return mo(t,Mr(e,p))},dr.memoize=ss,dr.merge=ac,dr.mergeWith=sc,dr.method=Lc,dr.methodOf=Ic,dr.mixin=Dc,dr.negate=cs,dr.nthArg=function(t){return t=Bs(t),wo(function(e){return vo(e,t)})},dr.omit=cc,dr.omitBy=function(t,e){return lc(t,cs(Pi(e)))},dr.once=function(t){return es(2,t)},dr.orderBy=function(t,e,n,r){return null==t?[]:(vs(e)||(e=null==e?[]:[e]),vs(n=r?i:n)||(n=null==n?[]:[n]),bo(t,e,n))},dr.over=Pc,dr.overArgs=us,dr.overEvery=jc,dr.overSome=Uc,dr.partial=ls,dr.partialRight=fs,dr.partition=Za,dr.pick=uc,dr.pickBy=lc,dr.property=Fc,dr.propertyOf=function(t){return function(e){return null==t?i:Xr(t,e)}},dr.pull=wa,dr.pullAll=Ca,dr.pullAllBy=function(t,e,n){return t&&t.length&&e&&e.length?yo(t,e,Pi(n,2)):t},dr.pullAllWith=function(t,e,n){return t&&t.length&&e&&e.length?yo(t,e,i,n):t},dr.pullAt=Aa,dr.range=$c,dr.rangeRight=Bc,dr.rearg=ps,dr.reject=function(t,e){return(vs(t)?Xe:qr)(t,cs(Pi(e,3)))},dr.remove=function(t,e){var n=[];if(!t||!t.length)return n;var r=-1,o=[],i=t.length;for(e=Pi(e,3);++r<i;){var a=t[r];e(a,r,t)&&(n.push(a),o.push(r))}return Eo(t,o),n},dr.rest=function(t,e){if("function"!=typeof t)throw new oe(c);return wo(t,e=e===i?e:Bs(e))},dr.reverse=Ta,dr.sampleSize=function(t,e,n){return e=(n?Wi(t,e,n):e===i)?1:Bs(e),(vs(t)?Cr:Ao)(t,e)},dr.set=function(t,e,n){return null==t?t:To(t,e,n)},dr.setWith=function(t,e,n,r){return r="function"==typeof r?r:i,null==t?t:To(t,e,n,r)},dr.shuffle=function(t){return(vs(t)?Ar:Oo)(t)},dr.slice=function(t,e,n){var r=null==t?0:t.length;return r?(n&&"number"!=typeof n&&Wi(t,e,n)?(e=0,n=r):(e=null==e?0:Bs(e),n=n===i?r:Bs(n)),No(t,e,n)):[]},dr.sortBy=Ja,dr.sortedUniq=function(t){return t&&t.length?Mo(t):[]},dr.sortedUniqBy=function(t,e){return t&&t.length?Mo(t,Pi(e,2)):[]},dr.split=function(t,e,n){return n&&"number"!=typeof n&&Wi(t,e,n)&&(e=n=i),(n=n===i?j:n>>>0)?(t=Gs(t))&&("string"==typeof e||null!=e&&!Ls(e))&&!(e=jo(e))&&Cn(t)?Ko(Ln(t),0,n):t.split(e,n):[]},dr.spread=function(t,e){if("function"!=typeof t)throw new oe(c);return e=null==e?0:Gn(Bs(e),0),wo(function(n){var r=n[e],o=Ko(n,0,e);return r&&tn(o,r),Ge(t,this,o)})},dr.tail=function(t){var e=null==t?0:t.length;return e?No(t,1,e):[]},dr.take=function(t,e,n){return t&&t.length?No(t,0,(e=n||e===i?1:Bs(e))<0?0:e):[]},dr.takeRight=function(t,e,n){var r=null==t?0:t.length;return r?No(t,(e=r-(e=n||e===i?1:Bs(e)))<0?0:e,r):[]},dr.takeRightWhile=function(t,e){return t&&t.length?Bo(t,Pi(e,3),!1,!0):[]},dr.takeWhile=function(t,e){return t&&t.length?Bo(t,Pi(e,3)):[]},dr.tap=function(t,e){return e(t),t},dr.throttle=function(t,e,n){var r=!0,o=!0;if("function"!=typeof t)throw new oe(c);return Ts(n)&&(r="leading"in n?!!n.leading:r,o="trailing"in n?!!n.trailing:o),os(t,e,{leading:r,maxWait:e,trailing:o})},dr.thru=$a,dr.toArray=Fs,dr.toPairs=fc,dr.toPairsIn=pc,dr.toPath=function(t){return vs(t)?Qe(t,la):Ms(t)?[t]:ri(ua(Gs(t)))},dr.toPlainObject=Hs,dr.transform=function(t,e,n){var r=vs(t),o=r||Es(t)||Ps(t);if(e=Pi(e,4),null==n){var i=t&&t.constructor;n=o?r?new i:[]:Ts(t)&&ws(i)?hr(Ne(t)):{}}return(o?We:Wr)(t,function(t,r,o){return e(n,t,r,o)}),n},dr.unary=function(t){return ts(t,1)},dr.union=Sa,dr.unionBy=Ra,dr.unionWith=Oa,dr.uniq=function(t){return t&&t.length?Uo(t):[]},dr.uniqBy=function(t,e){return t&&t.length?Uo(t,Pi(e,2)):[]},dr.uniqWith=function(t,e){return e="function"==typeof e?e:i,t&&t.length?Uo(t,i,e):[]},dr.unset=function(t,e){return null==t||Fo(t,e)},dr.unzip=Na,dr.unzipWith=La,dr.update=function(t,e,n){return null==t?t:$o(t,e,Vo(n))},dr.updateWith=function(t,e,n,r){return r="function"==typeof r?r:i,null==t?t:$o(t,e,Vo(n),r)},dr.values=dc,dr.valuesIn=function(t){return null==t?[]:bn(t,ic(t))},dr.without=Ia,dr.words=wc,dr.wrap=function(t,e){return ls(Vo(e),t)},dr.xor=Da,dr.xorBy=Ma,dr.xorWith=Pa,dr.zip=ja,dr.zipObject=function(t,e){return Ho(t||[],e||[],Sr)},dr.zipObjectDeep=function(t,e){return Ho(t||[],e||[],To)},dr.zipWith=Ua,dr.entries=fc,dr.entriesIn=pc,dr.extend=Ws,dr.extendWith=Ys,Dc(dr,dr),dr.add=Hc,dr.attempt=Cc,dr.camelCase=hc,dr.capitalize=mc,dr.ceil=Gc,dr.clamp=function(t,e,n){return n===i&&(n=e,e=i),n!==i&&(n=(n=qs(n))==n?n:0),e!==i&&(e=(e=qs(e))==e?e:0),Dr(qs(t),e,n)},dr.clone=function(t){return Mr(t,h)},dr.cloneDeep=function(t){return Mr(t,p|h)},dr.cloneDeepWith=function(t,e){return Mr(t,p|h,e="function"==typeof e?e:i)},dr.cloneWith=function(t,e){return Mr(t,h,e="function"==typeof e?e:i)},dr.conformsTo=function(t,e){return null==e||Pr(t,e,oc(e))},dr.deburr=gc,dr.defaultTo=function(t,e){return null==t||t!=t?e:t},dr.divide=Vc,dr.endsWith=function(t,e,n){t=Gs(t),e=jo(e);var r=t.length,o=n=n===i?r:Dr(Bs(n),0,r);return(n-=e.length)>=0&&t.slice(n,o)==e},dr.eq=ds,dr.escape=function(t){return(t=Gs(t))&&Ct.test(t)?t.replace(xt,xn):t},dr.escapeRegExp=function(t){return(t=Gs(t))&&It.test(t)?t.replace(Lt,"\\$&"):t},dr.every=function(t,e,n){var r=vs(t)?Ke:Br;return n&&Wi(t,e,n)&&(e=i),r(t,Pi(e,3))},dr.find=qa,dr.findIndex=ga,dr.findKey=function(t,e){return an(t,Pi(e,3),Wr)},dr.findLast=Ha,dr.findLastIndex=va,dr.findLastKey=function(t,e){return an(t,Pi(e,3),Yr)},dr.floor=Wc,dr.forEach=Ga,dr.forEachRight=Va,dr.forIn=function(t,e){return null==t?t:Gr(t,Pi(e,3),ic)},dr.forInRight=function(t,e){return null==t?t:Vr(t,Pi(e,3),ic)},dr.forOwn=function(t,e){return t&&Wr(t,Pi(e,3))},dr.forOwnRight=function(t,e){return t&&Yr(t,Pi(e,3))},dr.get=Qs,dr.gt=hs,dr.gte=ms,dr.has=function(t,e){return null!=t&&qi(t,e,to)},dr.hasIn=tc,dr.head=_a,dr.identity=Oc,dr.includes=function(t,e,n,r){t=_s(t)?t:dc(t),n=n&&!r?Bs(n):0;var o=t.length;return n<0&&(n=Gn(o+n,0)),Ds(t)?n<=o&&t.indexOf(e,n)>-1:!!o&&cn(t,e,n)>-1},dr.indexOf=function(t,e,n){var r=null==t?0:t.length;if(!r)return-1;var o=null==n?0:Bs(n);return o<0&&(o=Gn(r+o,0)),cn(t,e,o)},dr.inRange=function(t,e,n){return e=$s(e),n===i?(n=e,e=0):n=$s(n),function(t,e,n){return t>=Vn(e,n)&&t<Gn(e,n)}(t=qs(t),e,n)},dr.invoke=rc,dr.isArguments=gs,dr.isArray=vs,dr.isArrayBuffer=bs,dr.isArrayLike=_s,dr.isArrayLikeObject=ys,dr.isBoolean=function(t){return!0===t||!1===t||Ss(t)&&Jr(t)==H},dr.isBuffer=Es,dr.isDate=ks,dr.isElement=function(t){return Ss(t)&&1===t.nodeType&&!Ns(t)},dr.isEmpty=function(t){if(null==t)return!0;if(_s(t)&&(vs(t)||"string"==typeof t||"function"==typeof t.splice||Es(t)||Ps(t)||gs(t)))return!t.length;var e=zi(t);if(e==X||e==nt)return!t.size;if(Zi(t))return!uo(t).length;for(var n in t)if(le.call(t,n))return!1;return!0},dr.isEqual=function(t,e){return io(t,e)},dr.isEqualWith=function(t,e,n){var r=(n="function"==typeof n?n:i)?n(t,e):i;return r===i?io(t,e,i,n):!!r},dr.isError=xs,dr.isFinite=function(t){return"number"==typeof t&&zn(t)},dr.isFunction=ws,dr.isInteger=Cs,dr.isLength=As,dr.isMap=Rs,dr.isMatch=function(t,e){return t===e||ao(t,e,Ui(e))},dr.isMatchWith=function(t,e,n){return n="function"==typeof n?n:i,ao(t,e,Ui(e),n)},dr.isNaN=function(t){return Os(t)&&t!=+t},dr.isNative=function(t){if(Xi(t))throw new Jt(s);return so(t)},dr.isNil=function(t){return null==t},dr.isNull=function(t){return null===t},dr.isNumber=Os,dr.isObject=Ts,dr.isObjectLike=Ss,dr.isPlainObject=Ns,dr.isRegExp=Ls,dr.isSafeInteger=function(t){return Cs(t)&&t>=-D&&t<=D},dr.isSet=Is,dr.isString=Ds,dr.isSymbol=Ms,dr.isTypedArray=Ps,dr.isUndefined=function(t){return t===i},dr.isWeakMap=function(t){return Ss(t)&&zi(t)==at},dr.isWeakSet=function(t){return Ss(t)&&Jr(t)==st},dr.join=function(t,e){return null==t?"":qn.call(t,e)},dr.kebabCase=vc,dr.last=xa,dr.lastIndexOf=function(t,e,n){var r=null==t?0:t.length;if(!r)return-1;var o=r;return n!==i&&(o=(o=Bs(n))<0?Gn(r+o,0):Vn(o,r-1)),e==e?function(t,e,n){for(var r=n+1;r--;)if(t[r]===e)return r;return r}(t,e,o):sn(t,ln,o,!0)},dr.lowerCase=bc,dr.lowerFirst=_c,dr.lt=js,dr.lte=Us,dr.max=function(t){return t&&t.length?zr(t,Oc,Qr):i},dr.maxBy=function(t,e){return t&&t.length?zr(t,Pi(e,2),Qr):i},dr.mean=function(t){return fn(t,Oc)},dr.meanBy=function(t,e){return fn(t,Pi(e,2))},dr.min=function(t){return t&&t.length?zr(t,Oc,fo):i},dr.minBy=function(t,e){return t&&t.length?zr(t,Pi(e,2),fo):i},dr.stubArray=zc,dr.stubFalse=qc,dr.stubObject=function(){return{}},dr.stubString=function(){return""},dr.stubTrue=function(){return!0},dr.multiply=Kc,dr.nth=function(t,e){return t&&t.length?vo(t,Bs(e)):i},dr.noConflict=function(){return Ie._===this&&(Ie._=me),this},dr.noop=Mc,dr.now=Qa,dr.pad=function(t,e,n){t=Gs(t);var r=(e=Bs(e))?Nn(t):0;if(!e||r>=e)return t;var o=(e-r)/2;return bi(Fn(o),n)+t+bi(Un(o),n)},dr.padEnd=function(t,e,n){t=Gs(t);var r=(e=Bs(e))?Nn(t):0;return e&&r<e?t+bi(e-r,n):t},dr.padStart=function(t,e,n){t=Gs(t);var r=(e=Bs(e))?Nn(t):0;return e&&r<e?bi(e-r,n)+t:t},dr.parseInt=function(t,e,n){return n||null==e?e=0:e&&(e=+e),Yn(Gs(t).replace(Mt,""),e||0)},dr.random=function(t,e,n){if(n&&"boolean"!=typeof n&&Wi(t,e,n)&&(e=n=i),n===i&&("boolean"==typeof e?(n=e,e=i):"boolean"==typeof t&&(n=t,t=i)),t===i&&e===i?(t=0,e=1):(t=$s(t),e===i?(e=t,t=0):e=$s(e)),t>e){var r=t;t=e,e=r}if(n||t%1||e%1){var o=Kn();return Vn(t+o*(e-t+Re("1e-"+((o+"").length-1))),e)}return ko(t,e)},dr.reduce=function(t,e,n){var r=vs(t)?en:hn,o=arguments.length<3;return r(t,Pi(e,4),n,o,Fr)},dr.reduceRight=function(t,e,n){var r=vs(t)?nn:hn,o=arguments.length<3;return r(t,Pi(e,4),n,o,$r)},dr.repeat=function(t,e,n){return e=(n?Wi(t,e,n):e===i)?1:Bs(e),xo(Gs(t),e)},dr.replace=function(){var t=arguments,e=Gs(t[0]);return t.length<3?e:e.replace(t[1],t[2])},dr.result=function(t,e,n){var r=-1,o=(e=Wo(e,t)).length;for(o||(o=1,t=i);++r<o;){var a=null==t?i:t[la(e[r])];a===i&&(r=o,a=n),t=ws(a)?a.call(t):a}return t},dr.round=Xc,dr.runInContext=t,dr.sample=function(t){return(vs(t)?wr:Co)(t)},dr.size=function(t){if(null==t)return 0;if(_s(t))return Ds(t)?Nn(t):t.length;var e=zi(t);return e==X||e==nt?t.size:uo(t).length},dr.snakeCase=yc,dr.some=function(t,e,n){var r=vs(t)?rn:Lo;return n&&Wi(t,e,n)&&(e=i),r(t,Pi(e,3))},dr.sortedIndex=function(t,e){return Io(t,e)},dr.sortedIndexBy=function(t,e,n){return Do(t,e,Pi(n,2))},dr.sortedIndexOf=function(t,e){var n=null==t?0:t.length;if(n){var r=Io(t,e);if(r<n&&ds(t[r],e))return r}return-1},dr.sortedLastIndex=function(t,e){return Io(t,e,!0)},dr.sortedLastIndexBy=function(t,e,n){return Do(t,e,Pi(n,2),!0)},dr.sortedLastIndexOf=function(t,e){if(null!=t&&t.length){var n=Io(t,e,!0)-1;if(ds(t[n],e))return n}return-1},dr.startCase=Ec,dr.startsWith=function(t,e,n){return t=Gs(t),n=null==n?0:Dr(Bs(n),0,t.length),e=jo(e),t.slice(n,n+e.length)==e},dr.subtract=Zc,dr.sum=function(t){return t&&t.length?mn(t,Oc):0},dr.sumBy=function(t,e){return t&&t.length?mn(t,Pi(e,2)):0},dr.template=function(t,e,n){var r=dr.templateSettings;n&&Wi(t,e,n)&&(e=i),t=Gs(t),e=Ys({},e,r,Ai);var o,a,s=Ys({},e.imports,r.imports,Ai),c=oc(s),u=bn(s,c),l=0,f=e.interpolate||Xt,p="__p += '",d=ne((e.escape||Xt).source+"|"+f.source+"|"+(f===St?zt:Xt).source+"|"+(e.evaluate||Xt).source+"|$","g"),h="//# sourceURL="+(le.call(e,"sourceURL")?(e.sourceURL+"").replace(/[\r\n]/g," "):"lodash.templateSources["+ ++Ce+"]")+"\n";t.replace(d,function(e,n,r,i,s,c){return r||(r=i),p+=t.slice(l,c).replace(Zt,wn),n&&(o=!0,p+="' +\n__e("+n+") +\n'"),s&&(a=!0,p+="';\n"+s+";\n__p += '"),r&&(p+="' +\n((__t = ("+r+")) == null ? '' : __t) +\n'"),l=c+e.length,e}),p+="';\n";var m=le.call(e,"variable")&&e.variable;m||(p="with (obj) {\n"+p+"\n}\n"),p=(a?p.replace(_t,""):p).replace(yt,"$1").replace(Et,"$1;"),p="function("+(m||"obj")+") {\n"+(m?"":"obj || (obj = {});\n")+"var __t, __p = ''"+(o?", __e = _.escape":"")+(a?", __j = Array.prototype.join;\nfunction print() { __p += __j.call(arguments, '') }\n":";\n")+p+"return __p\n}";var g=Cc(function(){return Qt(c,h+"return "+p).apply(i,u)});if(g.source=p,xs(g))throw g;return g},dr.times=function(t,e){if((t=Bs(t))<1||t>D)return[];var n=j,r=Vn(t,j);e=Pi(e),t-=j;for(var o=gn(r,e);++n<t;)e(n);return o},dr.toFinite=$s,dr.toInteger=Bs,dr.toLength=zs,dr.toLower=function(t){return Gs(t).toLowerCase()},dr.toNumber=qs,dr.toSafeInteger=function(t){return t?Dr(Bs(t),-D,D):0===t?t:0},dr.toString=Gs,dr.toUpper=function(t){return Gs(t).toUpperCase()},dr.trim=function(t,e,n){if((t=Gs(t))&&(n||e===i))return t.replace(Dt,"");if(!t||!(e=jo(e)))return t;var r=Ln(t),o=Ln(e);return Ko(r,yn(r,o),En(r,o)+1).join("")},dr.trimEnd=function(t,e,n){if((t=Gs(t))&&(n||e===i))return t.replace(Pt,"");if(!t||!(e=jo(e)))return t;var r=Ln(t);return Ko(r,0,En(r,Ln(e))+1).join("")},dr.trimStart=function(t,e,n){if((t=Gs(t))&&(n||e===i))return t.replace(Mt,"");if(!t||!(e=jo(e)))return t;var r=Ln(t);return Ko(r,yn(r,Ln(e))).join("")},dr.truncate=function(t,e){var n=T,r=S;if(Ts(e)){var o="separator"in e?e.separator:o;n="length"in e?Bs(e.length):n,r="omission"in e?jo(e.omission):r}var a=(t=Gs(t)).length;if(Cn(t)){var s=Ln(t);a=s.length}if(n>=a)return t;var c=n-Nn(r);if(c<1)return r;var u=s?Ko(s,0,c).join(""):t.slice(0,c);if(o===i)return u+r;if(s&&(c+=u.length-c),Ls(o)){if(t.slice(c).search(o)){var l,f=u;for(o.global||(o=ne(o.source,Gs(qt.exec(o))+"g")),o.lastIndex=0;l=o.exec(f);)var p=l.index;u=u.slice(0,p===i?c:p)}}else if(t.indexOf(jo(o),c)!=c){var d=u.lastIndexOf(o);d>-1&&(u=u.slice(0,d))}return u+r},dr.unescape=function(t){return(t=Gs(t))&&wt.test(t)?t.replace(kt,In):t},dr.uniqueId=function(t){var e=++fe;return Gs(t)+e},dr.upperCase=kc,dr.upperFirst=xc,dr.each=Ga,dr.eachRight=Va,dr.first=_a,Dc(dr,(Yc={},Wr(dr,function(t,e){le.call(dr.prototype,e)||(Yc[e]=t)}),Yc),{chain:!1}),dr.VERSION="4.17.15",We(["bind","bindKey","curry","curryRight","partial","partialRight"],function(t){dr[t].placeholder=dr}),We(["drop","take"],function(t,e){vr.prototype[t]=function(n){n=n===i?1:Gn(Bs(n),0);var r=this.__filtered__&&!e?new vr(this):this.clone();return r.__filtered__?r.__takeCount__=Vn(n,r.__takeCount__):r.__views__.push({size:Vn(n,j),type:t+(r.__dir__<0?"Right":"")}),r},vr.prototype[t+"Right"]=function(e){return this.reverse()[t](e).reverse()}}),We(["filter","map","takeWhile"],function(t,e){var n=e+1,r=n==N||3==n;vr.prototype[t]=function(t){var e=this.clone();return e.__iteratees__.push({iteratee:Pi(t,3),type:n}),e.__filtered__=e.__filtered__||r,e}}),We(["head","last"],function(t,e){var n="take"+(e?"Right":"");vr.prototype[t]=function(){return this[n](1).value()[0]}}),We(["initial","tail"],function(t,e){var n="drop"+(e?"":"Right");vr.prototype[t]=function(){return this.__filtered__?new vr(this):this[n](1)}}),vr.prototype.compact=function(){return this.filter(Oc)},vr.prototype.find=function(t){return this.filter(t).head()},vr.prototype.findLast=function(t){return this.reverse().find(t)},vr.prototype.invokeMap=wo(function(t,e){return"function"==typeof t?new vr(this):this.map(function(n){return ro(n,t,e)})}),vr.prototype.reject=function(t){return this.filter(cs(Pi(t)))},vr.prototype.slice=function(t,e){t=Bs(t);var n=this;return n.__filtered__&&(t>0||e<0)?new vr(n):(t<0?n=n.takeRight(-t):t&&(n=n.drop(t)),e!==i&&(n=(e=Bs(e))<0?n.dropRight(-e):n.take(e-t)),n)},vr.prototype.takeRightWhile=function(t){return this.reverse().takeWhile(t).reverse()},vr.prototype.toArray=function(){return this.take(j)},Wr(vr.prototype,function(t,e){var n=/^(?:filter|find|map|reject)|While$/.test(e),r=/^(?:head|last)$/.test(e),o=dr[r?"take"+("last"==e?"Right":""):e],a=r||/^find/.test(e);o&&(dr.prototype[e]=function(){var e=this.__wrapped__,s=r?[1]:arguments,c=e instanceof vr,u=s[0],l=c||vs(e),f=function(t){var e=o.apply(dr,tn([t],s));return r&&p?e[0]:e};l&&n&&"function"==typeof u&&1!=u.length&&(c=l=!1);var p=this.__chain__,d=!!this.__actions__.length,h=a&&!p,m=c&&!d;if(!a&&l){e=m?e:new vr(this);var g=t.apply(e,s);return g.__actions__.push({func:$a,args:[f],thisArg:i}),new gr(g,p)}return h&&m?t.apply(this,s):(g=this.thru(f),h?r?g.value()[0]:g.value():g)})}),We(["pop","push","shift","sort","splice","unshift"],function(t){var e=ie[t],n=/^(?:push|sort|unshift)$/.test(t)?"tap":"thru",r=/^(?:pop|shift)$/.test(t);dr.prototype[t]=function(){var t=arguments;if(r&&!this.__chain__){var o=this.value();return e.apply(vs(o)?o:[],t)}return this[n](function(n){return e.apply(vs(n)?n:[],t)})}}),Wr(vr.prototype,function(t,e){var n=dr[e];if(n){var r=n.name+"";le.call(or,r)||(or[r]=[]),or[r].push({name:e,func:n})}}),or[hi(i,b).name]=[{name:"wrapper",func:i}],vr.prototype.clone=function(){var t=new vr(this.__wrapped__);return t.__actions__=ri(this.__actions__),t.__dir__=this.__dir__,t.__filtered__=this.__filtered__,t.__iteratees__=ri(this.__iteratees__),t.__takeCount__=this.__takeCount__,t.__views__=ri(this.__views__),t},vr.prototype.reverse=function(){if(this.__filtered__){var t=new vr(this);t.__dir__=-1,t.__filtered__=!0}else(t=this.clone()).__dir__*=-1;return t},vr.prototype.value=function(){var t=this.__wrapped__.value(),e=this.__dir__,n=vs(t),r=e<0,o=n?t.length:0,i=function(t,e,n){for(var r=-1,o=n.length;++r<o;){var i=n[r],a=i.size;switch(i.type){case"drop":t+=a;break;case"dropRight":e-=a;break;case"take":e=Vn(e,t+a);break;case"takeRight":t=Gn(t,e-a)}}return{start:t,end:e}}(0,o,this.__views__),a=i.start,s=i.end,c=s-a,u=r?s:a-1,l=this.__iteratees__,f=l.length,p=0,d=Vn(c,this.__takeCount__);if(!n||!r&&o==c&&d==c)return zo(t,this.__actions__);var h=[];t:for(;c--&&p<d;){for(var m=-1,g=t[u+=e];++m<f;){var v=l[m],b=v.iteratee,_=v.type,y=b(g);if(_==L)g=y;else if(!y){if(_==N)continue t;break t}}h[p++]=g}return h},dr.prototype.at=Ba,dr.prototype.chain=function(){return Fa(this)},dr.prototype.commit=function(){return new gr(this.value(),this.__chain__)},dr.prototype.next=function(){this.__values__===i&&(this.__values__=Fs(this.value()));var t=this.__index__>=this.__values__.length;return{done:t,value:t?i:this.__values__[this.__index__++]}},dr.prototype.plant=function(t){for(var e,n=this;n instanceof mr;){var r=pa(n);r.__index__=0,r.__values__=i,e?o.__wrapped__=r:e=r;var o=r;n=n.__wrapped__}return o.__wrapped__=t,e},dr.prototype.reverse=function(){var t=this.__wrapped__;if(t instanceof vr){var e=t;return this.__actions__.length&&(e=new vr(this)),(e=e.reverse()).__actions__.push({func:$a,args:[Ta],thisArg:i}),new gr(e,this.__chain__)}return this.thru(Ta)},dr.prototype.toJSON=dr.prototype.valueOf=dr.prototype.value=function(){return zo(this.__wrapped__,this.__actions__)},dr.prototype.first=dr.prototype.head,Ue&&(dr.prototype[Ue]=function(){return this}),dr}();Ie._=Dn,(o=function(){return Dn}.call(e,n,e,r))===i||(r.exports=o)}).call(this)}).call(this,n(11),n(21)(t))},function(t,e,n){!function(t){"object"==typeof window&&window||"object"==typeof self&&self;(function(t){var e,n=[],r=Object.keys,o={},i={},a=/^(no-?highlight|plain|text)$/i,s=/\blang(?:uage)?-([\w-]+)\b/i,c=/((^(<[^>]+>|\t|)+|(?:\n)))/gm,u="</span>",l={classPrefix:"hljs-",tabReplace:null,useBR:!1,languages:void 0};function f(t){return t.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;")}function p(t){return t.nodeName.toLowerCase()}function d(t,e){var n=t&&t.exec(e);return n&&0===n.index}function h(t){return a.test(t)}function m(t){var e,n={},r=Array.prototype.slice.call(arguments,1);for(e in t)n[e]=t[e];return r.forEach(function(t){for(e in t)n[e]=t[e]}),n}function g(t){var e=[];return function t(n,r){for(var o=n.firstChild;o;o=o.nextSibling)3===o.nodeType?r+=o.nodeValue.length:1===o.nodeType&&(e.push({event:"start",offset:r,node:o}),r=t(o,r),p(o).match(/br|hr|img|input/)||e.push({event:"stop",offset:r,node:o}));return r}(t,0),e}function v(t){if(e&&!t.langApiRestored){for(var n in t.langApiRestored=!0,e)t[n]&&(t[e[n]]=t[n]);(t.contains||[]).concat(t.variants||[]).forEach(v)}}function b(t){function e(t){return t&&t.source||t}function n(n,r){return new RegExp(e(n),"m"+(t.case_insensitive?"i":"")+(r?"g":""))}!function o(i,a){if(i.compiled)return;i.compiled=!0;i.keywords=i.keywords||i.beginKeywords;if(i.keywords){var s={},c=function(e,n){t.case_insensitive&&(n=n.toLowerCase()),n.split(" ").forEach(function(t){var n=t.split("|");s[n[0]]=[e,n[1]?Number(n[1]):1]})};"string"==typeof i.keywords?c("keyword",i.keywords):r(i.keywords).forEach(function(t){c(t,i.keywords[t])}),i.keywords=s}i.lexemesRe=n(i.lexemes||/\w+/,!0);a&&(i.beginKeywords&&(i.begin="\\b("+i.beginKeywords.split(" ").join("|")+")\\b"),i.begin||(i.begin=/\B|\b/),i.beginRe=n(i.begin),i.endSameAsBegin&&(i.end=i.begin),i.end||i.endsWithParent||(i.end=/\B|\b/),i.end&&(i.endRe=n(i.end)),i.terminator_end=e(i.end)||"",i.endsWithParent&&a.terminator_end&&(i.terminator_end+=(i.end?"|":"")+a.terminator_end));i.illegal&&(i.illegalRe=n(i.illegal));null==i.relevance&&(i.relevance=1);i.contains||(i.contains=[]);i.contains=Array.prototype.concat.apply([],i.contains.map(function(t){return function(t){t.variants&&!t.cached_variants&&(t.cached_variants=t.variants.map(function(e){return m(t,{variants:null},e)}));return t.cached_variants||t.endsWithParent&&[m(t)]||[t]}("self"===t?i:t)}));i.contains.forEach(function(t){o(t,i)});i.starts&&o(i.starts,a);var u=i.contains.map(function(t){return t.beginKeywords?"\\.?(?:"+t.begin+")\\.?":t.begin}).concat([i.terminator_end,i.illegal]).map(e).filter(Boolean);i.terminators=u.length?n(function(t,n){for(var r=/\[(?:[^\\\]]|\\.)*\]|\(\??|\\([1-9][0-9]*)|\\./,o=0,i="",a=0;a<t.length;a++){var s=o,c=e(t[a]);for(a>0&&(i+=n);c.length>0;){var u=r.exec(c);if(null==u){i+=c;break}i+=c.substring(0,u.index),c=c.substring(u.index+u[0].length),"\\"==u[0][0]&&u[1]?i+="\\"+String(Number(u[1])+s):(i+=u[0],"("==u[0]&&o++)}}return i}(u,"|"),!0):{exec:function(){return null}}}(t)}function _(t,e,n,r){function i(t){return new RegExp(t.replace(/[-\/\\^$*+?.()|[\]{}]/g,"\\$&"),"m")}function a(t,e){var n=m.case_insensitive?e[0].toLowerCase():e[0];return t.keywords.hasOwnProperty(n)&&t.keywords[n]}function s(t,e,n,r){var o=r?"":l.classPrefix,i='<span class="'+o,a=n?"":u;return i+=t+'">',t?i+e+a:e}function c(){k+=null!=v.subLanguage?function(){var t="string"==typeof v.subLanguage;if(t&&!o[v.subLanguage])return f(x);var e=t?_(v.subLanguage,x,!0,E[v.subLanguage]):y(x,v.subLanguage.length?v.subLanguage:void 0);v.relevance>0&&(C+=e.relevance);t&&(E[v.subLanguage]=e.top);return s(e.language,e.value,!1,!0)}():function(){var t,e,n,r;if(!v.keywords)return f(x);r="",e=0,v.lexemesRe.lastIndex=0,n=v.lexemesRe.exec(x);for(;n;)r+=f(x.substring(e,n.index)),(t=a(v,n))?(C+=t[1],r+=s(t[0],f(n[0]))):r+=f(n[0]),e=v.lexemesRe.lastIndex,n=v.lexemesRe.exec(x);return r+f(x.substr(e))}(),x=""}function p(t){k+=t.className?s(t.className,"",!0):"",v=Object.create(t,{parent:{value:v}})}function h(t,e){if(x+=t,null==e)return c(),0;var r=function(t,e){var n,r;for(n=0,r=e.contains.length;n<r;n++)if(d(e.contains[n].beginRe,t))return e.contains[n].endSameAsBegin&&(e.contains[n].endRe=i(e.contains[n].beginRe.exec(t)[0])),e.contains[n]}(e,v);if(r)return r.skip?x+=e:(r.excludeBegin&&(x+=e),c(),r.returnBegin||r.excludeBegin||(x=e)),p(r),r.returnBegin?0:e.length;var o=function t(e,n){if(d(e.endRe,n)){for(;e.endsParent&&e.parent;)e=e.parent;return e}if(e.endsWithParent)return t(e.parent,n)}(v,e);if(o){var a=v;a.skip?x+=e:(a.returnEnd||a.excludeEnd||(x+=e),c(),a.excludeEnd&&(x=e));do{v.className&&(k+=u),v.skip||v.subLanguage||(C+=v.relevance),v=v.parent}while(v!==o.parent);return o.starts&&(o.endSameAsBegin&&(o.starts.endRe=o.endRe),p(o.starts)),a.returnEnd?0:e.length}if(function(t,e){return!n&&d(e.illegalRe,t)}(e,v))throw new Error('Illegal lexeme "'+e+'" for mode "'+(v.className||"<unnamed>")+'"');return x+=e,e.length||1}var m=w(t);if(!m)throw new Error('Unknown language: "'+t+'"');b(m);var g,v=r||m,E={},k="";for(g=v;g!==m;g=g.parent)g.className&&(k=s(g.className,"",!0)+k);var x="",C=0;try{for(var A,T,S=0;v.terminators.lastIndex=S,A=v.terminators.exec(e);)T=h(e.substring(S,A.index),A[0]),S=A.index+T;for(h(e.substr(S)),g=v;g.parent;g=g.parent)g.className&&(k+=u);return{relevance:C,value:k,language:t,top:v}}catch(t){if(t.message&&-1!==t.message.indexOf("Illegal"))return{relevance:0,value:f(e)};throw t}}function y(t,e){e=e||l.languages||r(o);var n={relevance:0,value:f(t)},i=n;return e.filter(w).filter(C).forEach(function(e){var r=_(e,t,!1);r.language=e,r.relevance>i.relevance&&(i=r),r.relevance>n.relevance&&(i=n,n=r)}),i.language&&(n.second_best=i),n}function E(t){return l.tabReplace||l.useBR?t.replace(c,function(t,e){return l.useBR&&"\n"===t?"<br>":l.tabReplace?e.replace(/\t/g,l.tabReplace):""}):t}function k(t){var e,r,o,a,c,u=function(t){var e,n,r,o,i=t.className+" ";if(i+=t.parentNode?t.parentNode.className:"",n=s.exec(i))return w(n[1])?n[1]:"no-highlight";for(i=i.split(/\s+/),e=0,r=i.length;e<r;e++)if(h(o=i[e])||w(o))return o}(t);h(u)||(l.useBR?(e=document.createElementNS("http://www.w3.org/1999/xhtml","div")).innerHTML=t.innerHTML.replace(/\n/g,"").replace(/<br[ \/]*>/g,"\n"):e=t,c=e.textContent,o=u?_(u,c,!0):y(c),(r=g(e)).length&&((a=document.createElementNS("http://www.w3.org/1999/xhtml","div")).innerHTML=o.value,o.value=function(t,e,r){var o=0,i="",a=[];function s(){return t.length&&e.length?t[0].offset!==e[0].offset?t[0].offset<e[0].offset?t:e:"start"===e[0].event?t:e:t.length?t:e}function c(t){i+="<"+p(t)+n.map.call(t.attributes,function(t){return" "+t.nodeName+'="'+f(t.value).replace('"',"&quot;")+'"'}).join("")+">"}function u(t){i+="</"+p(t)+">"}function l(t){("start"===t.event?c:u)(t.node)}for(;t.length||e.length;){var d=s();if(i+=f(r.substring(o,d[0].offset)),o=d[0].offset,d===t){a.reverse().forEach(u);do{l(d.splice(0,1)[0]),d=s()}while(d===t&&d.length&&d[0].offset===o);a.reverse().forEach(c)}else"start"===d[0].event?a.push(d[0].node):a.pop(),l(d.splice(0,1)[0])}return i+f(r.substr(o))}(r,g(a),c)),o.value=E(o.value),t.innerHTML=o.value,t.className=function(t,e,n){var r=e?i[e]:n,o=[t.trim()];t.match(/\bhljs\b/)||o.push("hljs");-1===t.indexOf(r)&&o.push(r);return o.join(" ").trim()}(t.className,u,o.language),t.result={language:o.language,re:o.relevance},o.second_best&&(t.second_best={language:o.second_best.language,re:o.second_best.relevance}))}function x(){if(!x.called){x.called=!0;var t=document.querySelectorAll("pre code");n.forEach.call(t,k)}}function w(t){return t=(t||"").toLowerCase(),o[t]||o[i[t]]}function C(t){var e=w(t);return e&&!e.disableAutodetect}t.highlight=_,t.highlightAuto=y,t.fixMarkup=E,t.highlightBlock=k,t.configure=function(t){l=m(l,t)},t.initHighlighting=x,t.initHighlightingOnLoad=function(){addEventListener("DOMContentLoaded",x,!1),addEventListener("load",x,!1)},t.registerLanguage=function(e,n){var r=o[e]=n(t);v(r),r.aliases&&r.aliases.forEach(function(t){i[t]=e})},t.listLanguages=function(){return r(o)},t.getLanguage=w,t.autoDetection=C,t.inherit=m,t.IDENT_RE="[a-zA-Z]\\w*",t.UNDERSCORE_IDENT_RE="[a-zA-Z_]\\w*",t.NUMBER_RE="\\b\\d+(\\.\\d+)?",t.C_NUMBER_RE="(-?)(\\b0[xX][a-fA-F0-9]+|(\\b\\d+(\\.\\d*)?|\\.\\d+)([eE][-+]?\\d+)?)",t.BINARY_NUMBER_RE="\\b(0b[01]+)",t.RE_STARTERS_RE="!|!=|!==|%|%=|&|&&|&=|\\*|\\*=|\\+|\\+=|,|-|-=|/=|/|:|;|<<|<<=|<=|<|===|==|=|>>>=|>>=|>=|>>>|>>|>|\\?|\\[|\\{|\\(|\\^|\\^=|\\||\\|=|\\|\\||~",t.BACKSLASH_ESCAPE={begin:"\\\\[\\s\\S]",relevance:0},t.APOS_STRING_MODE={className:"string",begin:"'",end:"'",illegal:"\\n",contains:[t.BACKSLASH_ESCAPE]},t.QUOTE_STRING_MODE={className:"string",begin:'"',end:'"',illegal:"\\n",contains:[t.BACKSLASH_ESCAPE]},t.PHRASAL_WORDS_MODE={begin:/\b(a|an|the|are|I'm|isn't|don't|doesn't|won't|but|just|should|pretty|simply|enough|gonna|going|wtf|so|such|will|you|your|they|like|more)\b/},t.COMMENT=function(e,n,r){var o=t.inherit({className:"comment",begin:e,end:n,contains:[]},r||{});return o.contains.push(t.PHRASAL_WORDS_MODE),o.contains.push({className:"doctag",begin:"(?:TODO|FIXME|NOTE|BUG|XXX):",relevance:0}),o},t.C_LINE_COMMENT_MODE=t.COMMENT("//","$"),t.C_BLOCK_COMMENT_MODE=t.COMMENT("/\\*","\\*/"),t.HASH_COMMENT_MODE=t.COMMENT("#","$"),t.NUMBER_MODE={className:"number",begin:t.NUMBER_RE,relevance:0},t.C_NUMBER_MODE={className:"number",begin:t.C_NUMBER_RE,relevance:0},t.BINARY_NUMBER_MODE={className:"number",begin:t.BINARY_NUMBER_RE,relevance:0},t.CSS_NUMBER_MODE={className:"number",begin:t.NUMBER_RE+"(%|em|ex|ch|rem|vw|vh|vmin|vmax|cm|mm|in|pt|pc|px|deg|grad|rad|turn|s|ms|Hz|kHz|dpi|dpcm|dppx)?",relevance:0},t.REGEXP_MODE={className:"regexp",begin:/\//,end:/\/[gimuy]*/,illegal:/\n/,contains:[t.BACKSLASH_ESCAPE,{begin:/\[/,end:/\]/,relevance:0,contains:[t.BACKSLASH_ESCAPE]}]},t.TITLE_MODE={className:"title",begin:t.IDENT_RE,relevance:0},t.UNDERSCORE_TITLE_MODE={className:"title",begin:t.UNDERSCORE_IDENT_RE,relevance:0},t.METHOD_GUARD={begin:"\\.\\s*"+t.UNDERSCORE_IDENT_RE,relevance:0}})(e)}()},function(t,e,n){"use strict";t.exports=n(102)},function(t,e,n){"use strict";t.exports.encode=n(103),t.exports.decode=n(104),t.exports.format=n(105),t.exports.parse=n(106)},function(t,e){t.exports=/[\0-\uD7FF\uE000-\uFFFF]|[\uD800-\uDBFF][\uDC00-\uDFFF]|[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?:[^\uD800-\uDBFF]|^)[\uDC00-\uDFFF]/},function(t,e){t.exports=/[\0-\x1F\x7F-\x9F]/},function(t,e){t.exports=/[ \xA0\u1680\u2000-\u200A\u2028\u2029\u202F\u205F\u3000]/},function(t,e,n){"use strict";var r="<[A-Za-z][A-Za-z0-9\\-]*(?:\\s+[a-zA-Z_:][a-zA-Z0-9:._-]*(?:\\s*=\\s*(?:[^\"'=<>`\\x00-\\x20]+|'[^']*'|\"[^\"]*\"))?)*\\s*\\/?>",o="<\\/[A-Za-z][A-Za-z0-9\\-]*\\s*>",i=new RegExp("^(?:"+r+"|"+o+"|\x3c!----\x3e|\x3c!--(?:-?[^>-])(?:-?[^-])*--\x3e|<[?].*?[?]>|<![A-Z]+\\s+[^>]*>|<!\\[CDATA\\[[\\s\\S]*?\\]\\]>)"),a=new RegExp("^(?:"+r+"|"+o+")");t.exports.HTML_TAG_RE=i,t.exports.HTML_OPEN_CLOSE_TAG_RE=a},function(t,e,n){"use strict";t.exports.tokenize=function(t,e){var n,r,o,i,a=t.pos,s=t.src.charCodeAt(a);if(e)return!1;if(126!==s)return!1;if(o=(r=t.scanDelims(t.pos,!0)).length,i=String.fromCharCode(s),o<2)return!1;for(o%2&&(t.push("text","",0).content=i,o--),n=0;n<o;n+=2)t.push("text","",0).content=i+i,t.delimiters.push({marker:s,jump:n,token:t.tokens.length-1,level:t.level,end:-1,open:r.can_open,close:r.can_close});return t.pos+=r.length,!0},t.exports.postProcess=function(t){var e,n,r,o,i,a=[],s=t.delimiters,c=t.delimiters.length;for(e=0;e<c;e++)126===(r=s[e]).marker&&-1!==r.end&&(o=s[r.end],(i=t.tokens[r.token]).type="s_open",i.tag="s",i.nesting=1,i.markup="~~",i.content="",(i=t.tokens[o.token]).type="s_close",i.tag="s",i.nesting=-1,i.markup="~~",i.content="","text"===t.tokens[o.token-1].type&&"~"===t.tokens[o.token-1].content&&a.push(o.token-1));for(;a.length;){for(n=(e=a.pop())+1;n<t.tokens.length&&"s_close"===t.tokens[n].type;)n++;e!==--n&&(i=t.tokens[n],t.tokens[n]=t.tokens[e],t.tokens[e]=i)}}},function(t,e,n){"use strict";t.exports.tokenize=function(t,e){var n,r,o=t.pos,i=t.src.charCodeAt(o);if(e)return!1;if(95!==i&&42!==i)return!1;for(r=t.scanDelims(t.pos,42===i),n=0;n<r.length;n++)t.push("text","",0).content=String.fromCharCode(i),t.delimiters.push({marker:i,length:r.length,jump:n,token:t.tokens.length-1,level:t.level,end:-1,open:r.can_open,close:r.can_close});return t.pos+=r.length,!0},t.exports.postProcess=function(t){var e,n,r,o,i,a,s=t.delimiters;for(e=t.delimiters.length-1;e>=0;e--)95!==(n=s[e]).marker&&42!==n.marker||-1!==n.end&&(r=s[n.end],a=e>0&&s[e-1].end===n.end+1&&s[e-1].token===n.token-1&&s[n.end+1].token===r.token+1&&s[e-1].marker===n.marker,i=String.fromCharCode(n.marker),(o=t.tokens[n.token]).type=a?"strong_open":"em_open",o.tag=a?"strong":"em",o.nesting=1,o.markup=a?i+i:i,o.content="",(o=t.tokens[r.token]).type=a?"strong_close":"em_close",o.tag=a?"strong":"em",o.nesting=-1,o.markup=a?i+i:i,o.content="",a&&(t.tokens[s[e-1].token].content="",t.tokens[s[n.end+1].token].content="",e--))}},function(t,e,n){(function(t,r){var o;/*! https://mths.be/punycode v1.4.1 by @mathias */!function(i){e&&e.nodeType,t&&t.nodeType;var a="object"==typeof r&&r;a.global!==a&&a.window!==a&&a.self;var s,c=2147483647,u=36,l=1,f=26,p=38,d=700,h=72,m=128,g="-",v=/^xn--/,b=/[^\x20-\x7E]/,_=/[\x2E\u3002\uFF0E\uFF61]/g,y={overflow:"Overflow: input needs wider integers to process","not-basic":"Illegal input >= 0x80 (not a basic code point)","invalid-input":"Invalid input"},E=u-l,k=Math.floor,x=String.fromCharCode;function w(t){throw new RangeError(y[t])}function C(t,e){for(var n=t.length,r=[];n--;)r[n]=e(t[n]);return r}function A(t,e){var n=t.split("@"),r="";return n.length>1&&(r=n[0]+"@",t=n[1]),r+C((t=t.replace(_,".")).split("."),e).join(".")}function T(t){for(var e,n,r=[],o=0,i=t.length;o<i;)(e=t.charCodeAt(o++))>=55296&&e<=56319&&o<i?56320==(64512&(n=t.charCodeAt(o++)))?r.push(((1023&e)<<10)+(1023&n)+65536):(r.push(e),o--):r.push(e);return r}function S(t){return C(t,function(t){var e="";return t>65535&&(e+=x((t-=65536)>>>10&1023|55296),t=56320|1023&t),e+=x(t)}).join("")}function R(t,e){return t+22+75*(t<26)-((0!=e)<<5)}function O(t,e,n){var r=0;for(t=n?k(t/d):t>>1,t+=k(t/e);t>E*f>>1;r+=u)t=k(t/E);return k(r+(E+1)*t/(t+p))}function N(t){var e,n,r,o,i,a,s,p,d,v,b,_=[],y=t.length,E=0,x=m,C=h;for((n=t.lastIndexOf(g))<0&&(n=0),r=0;r<n;++r)t.charCodeAt(r)>=128&&w("not-basic"),_.push(t.charCodeAt(r));for(o=n>0?n+1:0;o<y;){for(i=E,a=1,s=u;o>=y&&w("invalid-input"),((p=(b=t.charCodeAt(o++))-48<10?b-22:b-65<26?b-65:b-97<26?b-97:u)>=u||p>k((c-E)/a))&&w("overflow"),E+=p*a,!(p<(d=s<=C?l:s>=C+f?f:s-C));s+=u)a>k(c/(v=u-d))&&w("overflow"),a*=v;C=O(E-i,e=_.length+1,0==i),k(E/e)>c-x&&w("overflow"),x+=k(E/e),E%=e,_.splice(E++,0,x)}return S(_)}function L(t){var e,n,r,o,i,a,s,p,d,v,b,_,y,E,C,A=[];for(_=(t=T(t)).length,e=m,n=0,i=h,a=0;a<_;++a)(b=t[a])<128&&A.push(x(b));for(r=o=A.length,o&&A.push(g);r<_;){for(s=c,a=0;a<_;++a)(b=t[a])>=e&&b<s&&(s=b);for(s-e>k((c-n)/(y=r+1))&&w("overflow"),n+=(s-e)*y,e=s,a=0;a<_;++a)if((b=t[a])<e&&++n>c&&w("overflow"),b==e){for(p=n,d=u;!(p<(v=d<=i?l:d>=i+f?f:d-i));d+=u)C=p-v,E=u-v,A.push(x(R(v+C%E,0))),p=k(C/E);A.push(x(R(p,0))),i=O(n,y,r==o),n=0,++r}++n,++e}return A.join("")}s={version:"1.4.1",ucs2:{decode:T,encode:S},decode:N,encode:L,toASCII:function(t){return A(t,function(t){return b.test(t)?"xn--"+L(t):t})},toUnicode:function(t){return A(t,function(t){return v.test(t)?N(t.slice(4).toLowerCase()):t})}},void 0===(o=function(){return s}.call(e,n,e,t))||(t.exports=o)}()}).call(this,n(21)(t),n(11))},function(t,e,n){"use strict";t.exports=function(t,e){!0===e&&(e=0);var n=t.indexOf("://"),r=t.substring(0,n).split("+").filter(Boolean);return"number"==typeof e?r[e]:r}},function(t,e,n){"use strict";var r=n(64);t.exports=function t(e){if(Array.isArray(e))return-1!==e.indexOf("ssh")||-1!==e.indexOf("rsync");if("string"!=typeof e)return!1;var n=r(e);return e=e.substring(e.indexOf("://")+3),!!t(n)||e.indexOf("@")<e.indexOf(":")}},function(t,e,n){"use strict";e.decode=e.parse=n(166),e.encode=e.stringify=n(167)},function(t,e,n){var r=n(172);t.exports=function(t,e,n){var o=t.length;return n=void 0===n?o:n,!e&&n>=o?t:r(t,e,n)}},function(t,e){var n=RegExp("[\\u200d\\ud800-\\udfff\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff\\ufe0e\\ufe0f]");t.exports=function(t){return n.test(t)}},function(t,e,n){var r=n(173),o=n(68),i=n(174);t.exports=function(t){return o(t)?i(t):r(t)}},function(t,e,n){var r=n(22),o=n(175),i=n(9),a=n(23),s=1/0,c=r?r.prototype:void 0,u=c?c.toString:void 0;t.exports=function t(e){if("string"==typeof e)return e;if(i(e))return o(e,t)+"";if(a(e))return u?u.call(e):"";var n=e+"";return"0"==n&&1/e==-s?"-0":n}},function(t,e,n){(function(e){var n="object"==typeof e&&e&&e.Object===Object&&e;t.exports=n}).call(this,n(11))},function(t,e,n){var r=n(182),o=n(183),i=n(184);t.exports=function(t,e,n){return e==e?i(t,e,n):r(t,o,n)}},function(t,e,n){var r=n(17),o=n(19),i="[object AsyncFunction]",a="[object Function]",s="[object GeneratorFunction]",c="[object Proxy]";t.exports=function(t){if(!o(t))return!1;var e=r(t);return e==a||e==s||e==i||e==c}},function(t,e,n){var r=n(75),o=n(196),i=Object.prototype.hasOwnProperty;t.exports=function(t){if(!r(t))return o(t);var e=[];for(var n in Object(t))i.call(t,n)&&"constructor"!=n&&e.push(n);return e}},function(t,e){var n=Object.prototype;t.exports=function(t){var e=t&&t.constructor;return t===("function"==typeof e&&e.prototype||n)}},function(t,e,n){var r=n(198),o=n(44),i=n(203),a=n(78),s=n(204),c=n(17),u=n(77),l=u(r),f=u(o),p=u(i),d=u(a),h=u(s),m=c;(r&&"[object DataView]"!=m(new r(new ArrayBuffer(1)))||o&&"[object Map]"!=m(new o)||i&&"[object Promise]"!=m(i.resolve())||a&&"[object Set]"!=m(new a)||s&&"[object WeakMap]"!=m(new s))&&(m=function(t){var e=c(t),n="[object Object]"==e?t.constructor:void 0,r=n?u(n):"";if(r)switch(r){case l:return"[object DataView]";case f:return"[object Map]";case p:return"[object Promise]";case d:return"[object Set]";case h:return"[object WeakMap]"}return e}),t.exports=m},function(t,e){var n=Function.prototype.toString;t.exports=function(t){if(null!=t){try{return n.call(t)}catch(t){}try{return t+""}catch(t){}}return""}},function(t,e,n){var r=n(12)(n(8),"Set");t.exports=r},function(t,e,n){var r=n(48),o=n(233),i=n(234);function a(t){var e=-1,n=null==t?0:t.length;for(this.__data__=new r;++e<n;)this.add(t[e])}a.prototype.add=a.prototype.push=o,a.prototype.has=i,t.exports=a},function(t,e){t.exports=function(t,e){return t.has(e)}},function(t,e,n){var r=n(27),o=n(248),i=n(249),a=n(250),s=n(251),c=n(252);function u(t){var e=this.__data__=new r(t);this.size=e.size}u.prototype.clear=o,u.prototype.delete=i,u.prototype.get=a,u.prototype.has=s,u.prototype.set=c,t.exports=u},function(t,e,n){var r=n(253),o=n(18);t.exports=function t(e,n,i,a,s){return e===n||(null==e||null==n||!o(e)&&!o(n)?e!=e&&n!=n:r(e,n,i,a,t,s))}},function(t,e,n){var r=n(79),o=n(254),i=n(80),a=1,s=2;t.exports=function(t,e,n,c,u,l){var f=n&a,p=t.length,d=e.length;if(p!=d&&!(f&&d>p))return!1;var h=l.get(t);if(h&&l.get(e))return h==e;var m=-1,g=!0,v=n&s?new r:void 0;for(l.set(t,e),l.set(e,t);++m<p;){var b=t[m],_=e[m];if(c)var y=f?c(_,b,m,e,t,l):c(b,_,m,t,e,l);if(void 0!==y){if(y)continue;g=!1;break}if(v){if(!o(e,function(t,e){if(!i(v,e)&&(b===t||u(b,t,n,c,l)))return v.push(e)})){g=!1;break}}else if(b!==_&&!u(b,_,n,c,l)){g=!1;break}}return l.delete(t),l.delete(e),g}},function(t,e,n){var r=n(19);t.exports=function(t){return t==t&&!r(t)}},function(t,e){t.exports=function(t,e){return function(n){return null!=n&&n[t]===e&&(void 0!==e||t in Object(n))}}},function(t,e,n){var r=n(87),o=n(30);t.exports=function(t,e){for(var n=0,i=(e=r(e,t)).length;null!=t&&n<i;)t=t[o(e[n++])];return n&&n==i?t:void 0}},function(t,e,n){var r=n(9),o=n(51),i=n(268),a=n(16);t.exports=function(t,e){return r(t)?t:o(t,e)?[t]:i(a(t))}},function(t,e){var n={utf8:{stringToBytes:function(t){return n.bin.stringToBytes(unescape(encodeURIComponent(t)))},bytesToString:function(t){return decodeURIComponent(escape(n.bin.bytesToString(t)))}},bin:{stringToBytes:function(t){for(var e=[],n=0;n<t.length;n++)e.push(255&t.charCodeAt(n));return e},bytesToString:function(t){for(var e=[],n=0;n<t.length;n++)e.push(String.fromCharCode(t[n]));return e.join("")}}};t.exports=n},function(t,e,n){var r=n(157),o=n(158),i=n(159);t.exports=function(t,e){return r(t)||o(t,e)||i()}},function(t,e,n){"use strict";e.__esModule=!0;var r=s(n(179)),o=s(n(211)),i=s(n(212)),a=s(n(213));function s(t){return t&&t.__esModule?t:{default:t}}e.default={format:function(t,e){switch((e=e||{}).language){case"db2":return new r.default(e).format(t);case"n1ql":return new o.default(e).format(t);case"pl/sql":return new i.default(e).format(t);case"sql":case void 0:return new a.default(e).format(t);default:throw Error("Unsupported SQL dialect: "+e.language)}}},t.exports=e.default},function(t,e,n){var r=n(239),o=n(240),i=n(245);t.exports=function(t,e){return r(t,i(e,3),o)}},function(t,e,n){var r,o,i,a,s;r=n(278),o=n(88).utf8,i=n(279),a=n(88).bin,(s=function(t,e){t.constructor==String?t=e&&"binary"===e.encoding?a.stringToBytes(t):o.stringToBytes(t):i(t)?t=Array.prototype.slice.call(t,0):Array.isArray(t)||(t=t.toString());for(var n=r.bytesToWords(t),c=8*t.length,u=1732584193,l=-271733879,f=-1732584194,p=271733878,d=0;d<n.length;d++)n[d]=16711935&(n[d]<<8|n[d]>>>24)|4278255360&(n[d]<<24|n[d]>>>8);n[c>>>5]|=128<<c%32,n[14+(c+64>>>9<<4)]=c;var h=s._ff,m=s._gg,g=s._hh,v=s._ii;for(d=0;d<n.length;d+=16){var b=u,_=l,y=f,E=p;u=h(u,l,f,p,n[d+0],7,-680876936),p=h(p,u,l,f,n[d+1],12,-389564586),f=h(f,p,u,l,n[d+2],17,606105819),l=h(l,f,p,u,n[d+3],22,-1044525330),u=h(u,l,f,p,n[d+4],7,-176418897),p=h(p,u,l,f,n[d+5],12,1200080426),f=h(f,p,u,l,n[d+6],17,-1473231341),l=h(l,f,p,u,n[d+7],22,-45705983),u=h(u,l,f,p,n[d+8],7,1770035416),p=h(p,u,l,f,n[d+9],12,-1958414417),f=h(f,p,u,l,n[d+10],17,-42063),l=h(l,f,p,u,n[d+11],22,-1990404162),u=h(u,l,f,p,n[d+12],7,1804603682),p=h(p,u,l,f,n[d+13],12,-40341101),f=h(f,p,u,l,n[d+14],17,-1502002290),u=m(u,l=h(l,f,p,u,n[d+15],22,1236535329),f,p,n[d+1],5,-165796510),p=m(p,u,l,f,n[d+6],9,-1069501632),f=m(f,p,u,l,n[d+11],14,643717713),l=m(l,f,p,u,n[d+0],20,-373897302),u=m(u,l,f,p,n[d+5],5,-701558691),p=m(p,u,l,f,n[d+10],9,38016083),f=m(f,p,u,l,n[d+15],14,-660478335),l=m(l,f,p,u,n[d+4],20,-405537848),u=m(u,l,f,p,n[d+9],5,568446438),p=m(p,u,l,f,n[d+14],9,-1019803690),f=m(f,p,u,l,n[d+3],14,-187363961),l=m(l,f,p,u,n[d+8],20,1163531501),u=m(u,l,f,p,n[d+13],5,-1444681467),p=m(p,u,l,f,n[d+2],9,-51403784),f=m(f,p,u,l,n[d+7],14,1735328473),u=g(u,l=m(l,f,p,u,n[d+12],20,-1926607734),f,p,n[d+5],4,-378558),p=g(p,u,l,f,n[d+8],11,-2022574463),f=g(f,p,u,l,n[d+11],16,1839030562),l=g(l,f,p,u,n[d+14],23,-35309556),u=g(u,l,f,p,n[d+1],4,-1530992060),p=g(p,u,l,f,n[d+4],11,1272893353),f=g(f,p,u,l,n[d+7],16,-155497632),l=g(l,f,p,u,n[d+10],23,-1094730640),u=g(u,l,f,p,n[d+13],4,681279174),p=g(p,u,l,f,n[d+0],11,-358537222),f=g(f,p,u,l,n[d+3],16,-722521979),l=g(l,f,p,u,n[d+6],23,76029189),u=g(u,l,f,p,n[d+9],4,-640364487),p=g(p,u,l,f,n[d+12],11,-421815835),f=g(f,p,u,l,n[d+15],16,530742520),u=v(u,l=g(l,f,p,u,n[d+2],23,-995338651),f,p,n[d+0],6,-198630844),p=v(p,u,l,f,n[d+7],10,1126891415),f=v(f,p,u,l,n[d+14],15,-1416354905),l=v(l,f,p,u,n[d+5],21,-57434055),u=v(u,l,f,p,n[d+12],6,1700485571),p=v(p,u,l,f,n[d+3],10,-1894986606),f=v(f,p,u,l,n[d+10],15,-1051523),l=v(l,f,p,u,n[d+1],21,-2054922799),u=v(u,l,f,p,n[d+8],6,1873313359),p=v(p,u,l,f,n[d+15],10,-30611744),f=v(f,p,u,l,n[d+6],15,-1560198380),l=v(l,f,p,u,n[d+13],21,1309151649),u=v(u,l,f,p,n[d+4],6,-145523070),p=v(p,u,l,f,n[d+11],10,-1120210379),f=v(f,p,u,l,n[d+2],15,718787259),l=v(l,f,p,u,n[d+9],21,-343485551),u=u+b>>>0,l=l+_>>>0,f=f+y>>>0,p=p+E>>>0}return r.endian([u,l,f,p])})._ff=function(t,e,n,r,o,i,a){var s=t+(e&n|~e&r)+(o>>>0)+a;return(s<<i|s>>>32-i)+e},s._gg=function(t,e,n,r,o,i,a){var s=t+(e&r|n&~r)+(o>>>0)+a;return(s<<i|s>>>32-i)+e},s._hh=function(t,e,n,r,o,i,a){var s=t+(e^n^r)+(o>>>0)+a;return(s<<i|s>>>32-i)+e},s._ii=function(t,e,n,r,o,i,a){var s=t+(n^(e|~r))+(o>>>0)+a;return(s<<i|s>>>32-i)+e},s._blocksize=16,s._digestsize=16,t.exports=function(t,e){if(null==t)throw new Error("Illegal argument "+t);var n=r.wordsToBytes(s(t,e));return e&&e.asBytes?n:e&&e.asString?a.bytesToString(n):r.bytesToHex(n)}},function(t,e,n){var r=n(94);"string"==typeof r&&(r=[[t.i,r,""]]);var o={hmr:!0,transform:void 0,insertInto:void 0};n(96)(r,o);r.locals&&(t.exports=r.locals)},function(t,e,n){(t.exports=n(95)(!1)).push([t.i,'@charset \'UTF-8\';\n\n/*! normalize.css v8.0.1 | MIT License | github.com/necolas/normalize.css */\n\n/* Document\n   ========================================================================== */\n\n/**\n * 1. Correct the line height in all browsers.\n * 2. Prevent adjustments of font size after orientation changes in iOS.\n */\n\nhtml {\n  line-height: 1.15; /* 1 */\n  -webkit-text-size-adjust: 100%; /* 2 */\n}\n\n/* Sections\n   ========================================================================== */\n\n/**\n * Remove the margin in all browsers.\n */\n\nbody {\n  margin: 0;\n}\n\n/**\n * Render the `main` element consistently in IE.\n */\n\nmain {\n  display: block;\n}\n\n/**\n * Correct the font size and margin on `h1` elements within `section` and\n * `article` contexts in Chrome, Firefox, and Safari.\n */\n\n/* Grouping content\n   ========================================================================== */\n\n/**\n * 1. Add the correct box sizing in Firefox.\n * 2. Show the overflow in Edge and IE.\n */\n\n/**\n * 1. Correct the inheritance and scaling of font size in all browsers.\n * 2. Correct the odd `em` font sizing in all browsers.\n */\n\npre {\n  font-family: monospace, monospace; /* 1 */\n  font-size: 1em; /* 2 */\n}\n\n/* Text-level semantics\n   ========================================================================== */\n\n/**\n * Remove the gray background on active links in IE 10.\n */\n\na {\n  background-color: transparent;\n}\n\n/**\n * 1. Remove the bottom border in Chrome 57-\n * 2. Add the correct text decoration in Chrome, Edge, IE, Opera, and Safari.\n */\n\n/**\n * Add the correct font weight in Chrome, Edge, and Safari.\n */\n\nb,\nstrong {\n  font-weight: bolder;\n}\n\n/**\n * 1. Correct the inheritance and scaling of font size in all browsers.\n * 2. Correct the odd `em` font sizing in all browsers.\n */\n\ncode {\n  font-family: monospace, monospace; /* 1 */\n  font-size: 1em; /* 2 */\n}\n\n/**\n * Add the correct font size in all browsers.\n */\n\n/**\n * Prevent `sub` and `sup` elements from affecting the line height in\n * all browsers.\n */\n\n/* Embedded content\n   ========================================================================== */\n\n/**\n * Remove the border on images inside links in IE 10.\n */\n\n/* Forms\n   ========================================================================== */\n\n/**\n * 1. Change the font styles in all browsers.\n * 2. Remove the margin in Firefox and Safari.\n */\n\nbutton,\ninput,\nselect,\ntextarea {\n  font-family: inherit; /* 1 */\n  font-size: 100%; /* 1 */\n  line-height: 1.15; /* 1 */\n  margin: 0; /* 2 */\n}\n\n/**\n * Show the overflow in IE.\n * 1. Show the overflow in Edge.\n */\n\nbutton,\ninput { /* 1 */\n  overflow: visible;\n}\n\n/**\n * Remove the inheritance of text transform in Edge, Firefox, and IE.\n * 1. Remove the inheritance of text transform in Firefox.\n */\n\nbutton,\nselect { /* 1 */\n  text-transform: none;\n}\n\n/**\n * Correct the inability to style clickable types in iOS and Safari.\n */\n\nbutton,\n[type="button"],\n[type="reset"],\n[type="submit"] {\n  -webkit-appearance: button;\n}\n\n/**\n * Remove the inner border and padding in Firefox.\n */\n\nbutton::-moz-focus-inner,\n[type="button"]::-moz-focus-inner,\n[type="reset"]::-moz-focus-inner,\n[type="submit"]::-moz-focus-inner {\n  border-style: none;\n  padding: 0;\n}\n\n/**\n * Restore the focus styles unset by the previous rule.\n */\n\nbutton:-moz-focusring,\n[type="button"]:-moz-focusring,\n[type="reset"]:-moz-focusring,\n[type="submit"]:-moz-focusring {\n  outline: 1px dotted ButtonText;\n}\n\n/**\n * Correct the padding in Firefox.\n */\n\n/**\n * 1. Correct the text wrapping in Edge and IE.\n * 2. Correct the color inheritance from `fieldset` elements in IE.\n * 3. Remove the padding so developers are not caught out when they zero out\n *    `fieldset` elements in all browsers.\n */\n\nlegend {\n  box-sizing: border-box; /* 1 */\n  color: inherit; /* 2 */\n  display: table; /* 1 */\n  max-width: 100%; /* 1 */\n  padding: 0; /* 3 */\n  white-space: normal; /* 1 */\n}\n\n/**\n * Add the correct vertical alignment in Chrome, Firefox, and Opera.\n */\n\n/**\n * Remove the default vertical scrollbar in IE 10+.\n */\n\ntextarea {\n  overflow: auto;\n}\n\n/**\n * 1. Add the correct box sizing in IE 10.\n * 2. Remove the padding in IE 10.\n */\n\n[type="checkbox"],\n[type="radio"] {\n  box-sizing: border-box; /* 1 */\n  padding: 0; /* 2 */\n}\n\n/**\n * Correct the cursor style of increment and decrement buttons in Chrome.\n */\n\n[type="number"]::-webkit-inner-spin-button,\n[type="number"]::-webkit-outer-spin-button {\n  height: auto;\n}\n\n/**\n * 1. Correct the odd appearance in Chrome and Safari.\n * 2. Correct the outline style in Safari.\n */\n\n[type="search"] {\n  -webkit-appearance: textfield; /* 1 */\n  outline-offset: -2px; /* 2 */\n}\n\n/**\n * Remove the inner padding in Chrome and Safari on macOS.\n */\n\n[type="search"]::-webkit-search-decoration {\n  -webkit-appearance: none;\n}\n\n/**\n * 1. Correct the inability to style clickable types in iOS and Safari.\n * 2. Change font properties to `inherit` in Safari.\n */\n\n::-webkit-file-upload-button {\n  -webkit-appearance: button; /* 1 */\n  font: inherit; /* 2 */\n}\n\n/* Interactive\n   ========================================================================== */\n\n/*\n * Add the correct display in Edge, IE 10+, and Firefox.\n */\n\n/*\n * Add the correct display in all browsers.\n */\n\n/* Misc\n   ========================================================================== */\n\n/**\n * Add the correct display in IE 10+.\n */\n\ntemplate {\n  display: none;\n}\n\n/**\n * Add the correct display in IE 10.\n */\n\n[hidden] {\n  display: none;\n}\n\n/**\n * Manually forked from SUIT CSS Base: https://github.com/suitcss/base\n * A thin layer on top of normalize.css that provides a starting point more\n * suitable for web applications.\n */\n\n/**\n * 1. Prevent padding and border from affecting element width\n * https://goo.gl/pYtbK7\n * 2. Change the default font family in all browsers (opinionated)\n */\n\nhtml {\n  box-sizing: border-box; /* 1 */\n  font-family: sans-serif; /* 2 */\n}\n\n*,\n*::before,\n*::after {\n  box-sizing: inherit;\n}\n\n/**\n * Removes the default spacing and border for appropriate elements.\n */\n\n\ndl,\ndd,\nh2,\nh3,\nh5,\np,\npre {\n  margin: 0;\n}\n\nbutton {\n  background: transparent;\n  padding: 0;\n}\n\n/**\n * Work around a Firefox/IE bug where the transparent `button` background\n * results in a loss of the default `button` focus styles.\n */\n\nbutton:focus {\n  outline: 1px dotted;\n  outline: 5px auto -webkit-focus-ring-color;\n}\n\nol,\nul {\n  list-style: none;\n  margin: 0;\n  padding: 0;\n}\n\n/**\n * Tailwind custom reset styles\n */\n\n/**\n * 1. Use the system font stack as a sane default.\n * 2. Use Tailwind\'s default "normal" line-height so the user isn\'t forced\n * to override it to ensure consistency even when using the default theme.\n */\n\nhtml {\n  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; /* 1 */\n  line-height: 1.5; /* 2 */\n}\n\n/**\n * Allow adding a border to an element by just adding a border-width.\n *\n * By default, the way the browser specifies that an element should have no\n * border is by setting it\'s border-style to `none` in the user-agent\n * stylesheet.\n *\n * In order to easily add borders to elements by just setting the `border-width`\n * property, we change the default border-style for all elements to `solid`, and\n * use border-width to hide them instead. This way our `border` utilities only\n * need to set the `border-width` property instead of the entire `border`\n * shorthand, making our border utilities much more straightforward to compose.\n *\n * https://github.com/tailwindcss/tailwindcss/pull/116\n */\n\n*,\n*::before,\n*::after {\n  border-width: 0;\n  border-style: solid;\n  border-color: rgb(232, 229, 239);\n  border-color: var(--gray-300);\n}\n\n/**\n * Undo the `border-style: none` reset that Normalize applies to images so that\n * our `border-{width}` utilities have the expected effect.\n *\n * The Normalize reset is unnecessary for us since we default the border-width\n * to 0 on all elements.\n *\n * https://github.com/tailwindcss/tailwindcss/issues/362\n */\n\ntextarea {\n  resize: vertical;\n}\n\ninput::-webkit-input-placeholder,\ntextarea::-webkit-input-placeholder {\n  color: inherit;\n  opacity: 0.5;\n}\n\ninput::-moz-placeholder,\ntextarea::-moz-placeholder {\n  color: inherit;\n  opacity: 0.5;\n}\n\ninput:-ms-input-placeholder,\ntextarea:-ms-input-placeholder {\n  color: inherit;\n  opacity: 0.5;\n}\n\ninput::-ms-input-placeholder,\ntextarea::-ms-input-placeholder {\n  color: inherit;\n  opacity: 0.5;\n}\n\ninput::placeholder,\ntextarea::placeholder {\n  color: inherit;\n  opacity: 0.5;\n}\n\nbutton,\n[role="button"] {\n  cursor: pointer;\n}\n\n\nh2,\nh3,\nh5 {\n  font-size: inherit;\n  font-weight: inherit;\n}\n\n/**\n * Reset links to optimize for opt-in styling instead of\n * opt-out.\n */\n\na {\n  color: inherit;\n  text-decoration: inherit;\n}\n\n/**\n * Reset form element properties that are easy to forget to\n * style explicitly so you don\'t inadvertently introduce\n * styles that deviate from your design system. These styles\n * supplement a partial reset that is already applied by\n * normalize.css.\n */\n\nbutton,\ninput,\nselect,\ntextarea {\n  padding: 0;\n  line-height: inherit;\n  color: inherit;\n}\n\n/**\n * Use the configured \'mono\' font family for elements that\n * are expected to be rendered with a monospace font, falling\n * back to the system monospace stack if there is no configured\n * \'mono\' font family.\n */\n\npre,\ncode {\n  font-family: SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;\n}\n\n/**\n * Make replaced elements `display: block` by default as that\'s\n * the behavior you want almost all of the time. Inspired by\n * CSS Remedy, with `svg` added as well.\n *\n * https://github.com/mozdevs/cssremedy/issues/14\n */\n\n\nsvg,\ncanvas {\n  display: block;\n  vertical-align: middle;\n}\n\n/**\n * Constrain images and videos to the parent width and preserve\n * their instrinsic aspect ratio.\n *\n * https://github.com/mozdevs/cssremedy/issues/14\n */\n\n:root {\n  --white: rgb(255, 255, 255);\n  --blue-400: rgb(122, 122, 255);\n  --green-100: rgb(227, 255, 242);\n  --green-300: rgb(148, 242, 200);\n  --green-400: rgb(114, 224, 175);\n  --green-500: rgb(34, 212, 146);\n  --purple-100: rgb(251, 245, 255);\n  --purple-200: rgb(236, 211, 253);\n  --purple-300: rgb(214, 188, 250);\n  --purple-400: rgb(183, 148, 244);\n  --purple-500: rgb(121, 0, 245);\n  --purple-600: rgb(113, 7, 220);\n  --purple-800: rgb(79, 15, 143);\n  --red-100: rgb(255, 235, 243);\n  --red-300: rgb(250, 133, 162);\n  --red-400: rgb(250, 78, 121);\n  --yellow-100: rgb(255, 253, 235);\n  --yellow-200: rgb(255, 248, 196);\n  --yellow-300: rgb(255, 243, 148);\n  --yellow-400: rgb(255, 234, 79);\n  --tint-50: rgba(0, 0, 150, 0.015);\n  --tint-100: rgba(0, 0, 150, 0.025);\n  --tint-200: rgba(0, 0, 100, 0.07);\n  --tint-300: rgba(25, 0, 100, 0.1);\n  --tint-400: rgba(20, 0, 100, 0.2);\n  --tint-500: rgba(30, 20, 90, 0.35);\n  --tint-600: rgba(30, 20, 70, 0.5);\n  --tint-700: rgba(15, 10, 60, 0.75);\n  --gray-50: rgb(252, 252, 253);\n  --gray-100: rgb(247, 247, 252);\n  --gray-200: rgb(238, 238, 245);\n  --gray-300: rgb(232, 229, 239);\n  --gray-400: rgb(209, 204, 224);\n  --gray-500: rgb(176, 173, 197);\n  --gray-600: rgb(142, 137, 162);\n  --gray-700: rgb(75, 71, 109);\n  --gray-800: rgb(51, 47, 81);\n  /* dark theme */\n  --dark-white: rgb(38, 38, 50);\n  --dark-blue-400: rgb(85, 0, 255);\n  --dark-green-100: rgb(32, 97, 90);\n  --dark-green-300: rgb(55, 111, 123);\n  --dark-green-500: rgb(63, 152, 142);\n  --dark-purple-100: rgb(60, 46, 96);\n  --dark-purple-200: rgb(81, 50, 128);\n  --dark-purple-300: rgb(104, 85, 147);\n  --dark-purple-400: rgb(106, 87, 148);\n  --dark-purple-500: rgb(126, 107, 167);\n  --dark-purple-600: rgb(145, 127, 183);\n  --dark-purple-800: rgb(158, 140, 194);\n  --dark-red-100: rgb(255, 235, 243);\n  --dark-red-300: rgb(250, 133, 162);\n  --dark-red-400: rgb(250, 78, 121);\n  --dark-yellow-100: rgb(61, 57, 49);\n  --dark-yellow-200: rgb(90, 78, 53);\n  --dark-yellow-300: rgb(119, 103, 70);\n  --dark-yellow-400: rgb(145, 121, 90);\n  --dark-tint-50: rgba(240, 240, 245, 0.05);\n  --dark-tint-100: rgba(240, 240, 245, 0.075);\n  --dark-tint-200: rgba(240, 240, 245, 0.1);\n  --dark-tint-300: rgba(240, 240, 245, 0.125);\n  --dark-tint-400: rgba(240, 240, 245, 0.25);\n  --dark-tint-500: rgba(240, 240, 245, 0.45);\n  --dark-tint-600: rgba(240, 240, 245, 0.55);\n  --dark-tint-700: rgba(240, 240, 245, 0.65);\n  --dark-gray-0: rgb(30, 30, 40);\n  --dark-gray-50: rgb(38, 38, 50);\n  --dark-gray-100: rgb(48, 48, 58);\n  --dark-gray-200: rgb(51, 51, 65);\n  --dark-gray-300: rgb(75, 75, 85);\n  --dark-gray-400: rgb(142, 142, 160);\n  --dark-gray-500: rgb(152, 152, 170);\n  --dark-gray-600: rgb(165, 165, 175);\n  --dark-gray-700: rgb(216, 216, 223);\n  --dark-gray-800: rgb(230, 230, 235);\n  --dark-shadow-sm: \'0 2px 0 var(--
HTTP request

Raw HTTP request used to retrieve the page.

GET / HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:50 GMT

Location: /login

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>
Proof
HTTP/1.1 302 Found
HTTP request

Raw HTTP request used to retrieve the page.

POST /admin/permissions HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/permissions/create

Origin: http://b3789e93786d.ngrok.io

Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryNL2M2X2E0LRxzc4t

Content-Length: 269

Cookie: XSRF-TOKEN=eyJpdiI6InVlcGxBbzhJYWF6QjhReFJRZzk5aXc9PSIsInZhbHVlIjoiUmloRHlNNW1xbFVDRFNQTzNiWDNNT3psS25TM0N2SG9pSUhSU05mZUJEdTQrK1wvdVlVTEVUNmxEdWdrWHQ1MGVaTFU1dHRJR0VqcHg4WWVoUGxBamVFejRuVGk5QkNtUTdZVW1xVm03WDI3cmpINTBwMDJna1JReXNyZmxhXC93MiIsIm1hYyI6IjBjZjM4MmQyMTE1ZmRjOTM2OGJjYmM4YWYyNTQ3NDU2YzdiYWZlYzM0NTdmOTBjN2YxOWMwMDNhNjc0ZjI2MzMifQ%3D%3D;laravel_session=eyJpdiI6InJRYW5TaTRHeHNwMExxeUtjTHRPQkE9PSIsInZhbHVlIjoiZzU3Y0xYZ05hZVZNYk5LSTdKVm5XeEcxQTZqTGs1Y1dzbDRSVGJJbWdISUNUQUwyekxLNlVNMU5pcldyU21ES0o4cGtkWkdCN1wvb0FBMTIzT25lQTlqSFgwVlwvK1QzZE1MUHl2NlhucXJWNzhZVjk1Nlcyb1ZRUE8wR2JxS2FhdSIsIm1hYyI6ImJjYjVhY2E1Yjc4NmFjNjE4M2IwYTAzNWM1ZmZhYjJmNDE5NTRjZGEzODk1ODdiN2I0OTZkNDkyZjE5ZjA1YmQifQ%3D%3D

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



------WebKitFormBoundaryNL2M2X2E0LRxzc4t

Content-Disposition: form-data; name="_token"



SdA3YNqBGzGKvj3hngkMl8fZUzT7HSIjSPhkCCg2

------WebKitFormBoundaryNL2M2X2E0LRxzc4t

Content-Disposition: form-data; name="title"





------WebKitFormBoundaryNL2M2X2E0LRxzc4t--

HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 13:41:17 GMT

Location: http://b3789e93786d.ngrok.io/admin/permissions/create

Set-Cookie: XSRF-TOKEN=eyJpdiI6IkRUNkU2WmpqVVZYVEJJd3ZLRnRTMHc9PSIsInZhbHVlIjoiOEwxTFh0OVpBbzI4UEtcL3k4Tm95RkVMZWV2ak8wS0xWU0h2djQ0RDZjXC8rMEVManpsVFQrZSt4WU5YOXc1ZTBLSDc3clwvUk53TmxqeFF2RytseStHdTU5dUVUcEZUcTJJS1F6MWpcLzNkaHlxTlpFcXVZQzlLb3haNjUxNG9tRm14IiwibWFjIjoiZDFkODE3Y2I3NjZkZDg2YTJiYzEzZDNmMTQ1YzBiZTRmNTE3ZGE1Y2VmNTNmNDJlZmY5NmE3NDFiNTNmNGQyMyJ9; expires=Mon, 02-Nov-2020 15:41:17 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6Ild4V2VjYnZcL2RPWGxwdzRBcTQyQWh3PT0iLCJ2YWx1ZSI6IlpIUEVqSWxSZzI1ZUV6ejNybmdsNG02bE9vbkNoQ01IWmczXC9icXl1R3FVeXEzU0c5cUpsZjcwTlo5TkVmWUVLTlVWMXlTWnV1SWpDNTA3MldwN2J5ZlNSdUVSMEVnZHFLWVFiXC9QS1dWYnVxcGNlMUQ0WHV4Z3I1bGp5NmxsQjEiLCJtYWMiOiI5YjgxZTI3OTAxZWUwMmMwNzhlMWRjYzljODJlY2QxZGJhNmM4YWZmM2I3MDUzNDZiYTgwNTJhYmYzYjkzNjg5In0%3D; expires=Mon, 02-Nov-2020 15:41:17 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io/admin/permissions/create'" />

        <title>Redirecting to http://b3789e93786d.ngrok.io/admin/permissions/create</title>
    </head>
    <body>
        Redirecting to <a href="http://b3789e93786d.ngrok.io/admin/permissions/create">http://b3789e93786d.ngrok.io/admin/permissions/create</a>.
    </body>
</html>
HTTP request

Raw HTTP request used to retrieve the page.

GET / HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:50 GMT

Location: /login

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>
Proof
HTTP/1.1 302 Found
HTTP request

Raw HTTP request used to retrieve the page.

POST /admin/permissions/1 HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/permissions/1/edit

Origin: http://b3789e93786d.ngrok.io

Content-Type: multipart/form-data; boundary=----WebKitFormBoundarysKuG0H3ittjkT99Y

Content-Length: 388

Cookie: XSRF-TOKEN=eyJpdiI6IjVqamxGTVRlaVpXVHdxeERmWEZuTlE9PSIsInZhbHVlIjoiZVJHUGpWaHBiemszdnQ4bnd6WFgzNTU0ZUFibUFVSitzQTVqVVdoN0tXXC9cLzdUZmRRT09WVHZuTHU5Z0xuaWZkZ2x4ZXFRZnE4a2pEZU83dVJDTTVmdjZXTmdxTyt3Y29nUytDZHZ3YUtnaTVzaEoxSWNcL1hTSG41U3k0N05EdjAiLCJtYWMiOiI3ODFlNDljNjEwY2UwMzQxZWMyYWIzYWFlMjA2N2FmOGUwOGYwYTE2MjVlYzZkZjU5ZDg1YzdhODc3MmZlYmQwIn0%3D;laravel_session=eyJpdiI6IlRHblZoU3kxczBzaVBsU0ZPU2VpckE9PSIsInZhbHVlIjoiNVNzeDA4TUZRVFVpZUxROTdrSTB3Sm84bm1aTGhFc0lhTmRjQVwvOWc3aXliUXkwVUxxaFB6MmdWM1l3WVhtTUxQQTFYOFF5NWtVWjVocCsyUUd0QnpQdGxBMXA5TFo3ZkNNQ0oxRGRmdU1qSm5FcXFkVkR2UlA1VUNPRkRHendCIiwibWFjIjoiMjMxNGE2MTJiYWYzNjU0MzdjYjM4YThlYTFkMjQ3ZTZlMjFjZWVlZTE1NGRhYTQ3ODRlYjYzMTY0OWFjMjQxMSJ9

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



------WebKitFormBoundarysKuG0H3ittjkT99Y

Content-Disposition: form-data; name="_token"



hTawC0Yfr4UP2G7uMvigZ2LukxZCHf7dd0UK9GdB

------WebKitFormBoundarysKuG0H3ittjkT99Y

Content-Disposition: form-data; name="_method"



PUT

------WebKitFormBoundarysKuG0H3ittjkT99Y

Content-Disposition: form-data; name="title"



user_management_access

------WebKitFormBoundarysKuG0H3ittjkT99Y--

HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 13:42:14 GMT

Location: http://b3789e93786d.ngrok.io/admin/permissions

Set-Cookie: XSRF-TOKEN=eyJpdiI6IlpQemc2clMrbW4rWjVhVHErMHJiRlE9PSIsInZhbHVlIjoib2VmUnhhNXlKblRXZWhKZ3ZvZFZIUjhOdm9SUHc3b1d0dHJkR2xiK2JjRW9ST0U3cXNzV0RNQ3VOTzVKcEJqaWVpZXlyZU5yRXJMbWd3OWRmeVhDS1pRYWJDZGlGdTRUbG5hTWh2YVpnV2cwNldZMTFtT2tuNElYd2llM0xVZFciLCJtYWMiOiJkNzY2MTI3MWQ5ZjM1ZTJiMjg5MWI4MzZiNjA4MGI3OThkMGIzN2Q5NWM1MDYwNTYxMjY2MzMxNzlkYzQ3NzE2In0%3D; expires=Mon, 02-Nov-2020 15:42:14 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6Inlna283OUgyR0VBYVlkNWR1OVg0MFE9PSIsInZhbHVlIjoiZ3B0Y3NRekFuNTZ5ME9cLzdQODd5R1FKY2pMU0FZXC9NemNVMUtGbXlhTE14VUF5dlpncE5vdFI3SFZUU0c0dWdUNHZadnkrbGg4dktlMVRCSXRPWkJpSnRON01lMGFYZUg0TkduVmp0TnJPZ3JCV0twSVRHUVVTRVJ0bHZUdTVZZCIsIm1hYyI6IjZlYmY1NzY1NmEwM2IxNjc3MTZhOTAzYjc3OTc5MzY5NzM4YTcyZjAwM2JkOTczZjU4Y2JmNTJjNDMyMDBiZmEifQ%3D%3D; expires=Mon, 02-Nov-2020 15:42:14 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io/admin/permissions'" />

        <title>Redirecting to http://b3789e93786d.ngrok.io/admin/permissions</title>
    </head>
    <body>
        Redirecting to <a href="http://b3789e93786d.ngrok.io/admin/permissions">http://b3789e93786d.ngrok.io/admin/permissions</a>.
    </body>
</html>
HTTP request

Raw HTTP request used to retrieve the page.

GET / HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:50 GMT

Location: /login

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>
Proof
HTTP/1.1 302 Found
HTTP request

Raw HTTP request used to retrieve the page.

POST /admin/roles HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/roles/create

Origin: http://b3789e93786d.ngrok.io

Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryAyGALzWqDJRhAhcB

Content-Length: 269

Cookie: XSRF-TOKEN=eyJpdiI6IlN1SXBcL1FvZmc5M05rYjRlU29lWnhBPT0iLCJ2YWx1ZSI6InR4UHBaXC9mTUlGNkxIb29VT1RkcFB1TFd2cWRtdStuWGVGSGVzS1VyU0F2dVdqOEF3VGpNK0VGWkVCVEJZVDdGZGV1VjJaV1wveWVoWTczTStOMTZUZXBtblNPRklcLytTV0szWmtlUzBqeG1jcHV5MEY2WnV3bzEwS0VweCtCYWdhIiwibWFjIjoiN2JjYjkzZmJjZmViYzdlZDhmMTMxNTQ3ZThhM2VlYTA5NjNlZTIwNzFmMWE3YjU0ZmY4OTg2YWQxZjI4ZjAyNCJ9;laravel_session=eyJpdiI6ImFUSFBhUXlqUkJSZzBlQ090VTZoR3c9PSIsInZhbHVlIjoiQlQ2UEY0ZnExV085RXJNdVNEb2JSQ0NFM1AzaEdZXC9Ma1J2VUJ5T292eDhlcDdHXC93R3FNOFQ3SW52YTVyR0pZeCtURGlBbmZaTkZkZzBhUmhRU3lUWjNXM3ZCWWlYUGZERk12eTJPNmpuTFV1andxVHlFVitWdlZvM0xNVUVDRSIsIm1hYyI6Ijc4ZDRiNWFhZjQ1NTkyMTM5N2ZlNjc2NTZkYTY0MGIxNzUyYjJlZmIyZTExMWMwN2I0YzAxNzI5MTJiYTg1ZjkifQ%3D%3D

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



------WebKitFormBoundaryAyGALzWqDJRhAhcB

Content-Disposition: form-data; name="_token"



j5tgnP92kTtjZ9Nf0kpFr4XQYUat3lF9nIyQwlVg

------WebKitFormBoundaryAyGALzWqDJRhAhcB

Content-Disposition: form-data; name="title"





------WebKitFormBoundaryAyGALzWqDJRhAhcB--

HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 14:25:47 GMT

Location: http://b3789e93786d.ngrok.io/admin/roles/create

Set-Cookie: XSRF-TOKEN=eyJpdiI6InZwWndXQjF1NmRNT1phS1NaTXJIbFE9PSIsInZhbHVlIjoiRGI4NjZsbkJIUVlFWjFBc2FGYTViXC9DSDlSdDNVU25TaDg2aGJualwvTVh1eGppSUkxckZzU0htM3BTanA5QVYwWVhuV0pxcUQrMVlsWVFhcHNieUlcL0p2NUFFVW1yRkJRUWZkQVhDZWJxY0pBR0krc3BvcFIzbmVRN29NODcwcHUiLCJtYWMiOiI3OWU5ZWQ5ZmUyMTI3Y2E4NWY2ZDUzYmEwMDIzZGY2N2MyOTYzYTQzOTE4MGU1NjhiZDFmN2NkNDU1YjI2Y2ExIn0%3D; expires=Mon, 02-Nov-2020 16:25:47 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6IkUxV0Y2WHhNbjJ3TGt2dUFSUnlZMXc9PSIsInZhbHVlIjoia3JFb2ZaUUNsQUUyMmo4cVE4eERxeStpVHYwVTU4TGI3RjdcL2dMd1RSK3o2djBLSHBJV3NvMTAwTnJ2MzZrSUdibGlGU01WWnhCMUxvZXE2THRNQTFGRWphTGk4eDVSQ0dcLzZZXC93bnBNZ2RJZVVFN1hCdnlSeDJ0cE0rRGdrQTkiLCJtYWMiOiI5YzgwNGJmMzk1NmE0ZjFjMmQzMDQxYzM0MWEzZmIwMDY4YTJmNGQyNTVhOGJjNTJlMjA2NGZkYmY1YWYyNzE3In0%3D; expires=Mon, 02-Nov-2020 16:25:47 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io/admin/roles/create'" />

        <title>Redirecting to http://b3789e93786d.ngrok.io/admin/roles/create</title>
    </head>
    <body>
        Redirecting to <a href="http://b3789e93786d.ngrok.io/admin/roles/create">http://b3789e93786d.ngrok.io/admin/roles/create</a>.
    </body>
</html>
HTTP request

Raw HTTP request used to retrieve the page.

GET / HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:50 GMT

Location: /login

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>
Proof
HTTP/1.1 302 Found
HTTP request

Raw HTTP request used to retrieve the page.

POST /admin/users HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/users/create

Origin: http://b3789e93786d.ngrok.io

Content-Type: multipart/form-data; boundary=----WebKitFormBoundary9YyCqZ9eUD838dgZ

Content-Length: 455

Cookie: XSRF-TOKEN=eyJpdiI6IkwrdE9na1JCUWl5TlBZaytQMEZsOUE9PSIsInZhbHVlIjoiXC9rTm1ZQSt3SFlBUFcySW5PaVJsWEI1VDBxQ0lIZ01MSHJTSVUrYnBSelFZZW5xaEV2ODJnSTBicWNLQUppdEw4b3oxK0d6ZTlqTlwvZFNnSGFEMW9xYnFDeVlnY3g2QUtRZU5BMlcwWWZlXC9wb0JoZnozc1lJWmE0cHlYNmgxa3QiLCJtYWMiOiIwODJkNTk4NjliMWU0ZGI3NmY1YmQzNmZiZGNhZDBmNWE4MDNiYjY1MTViMWVlZTRkMWI0Mzc1ODVlZjQ0NDkwIn0%3D;laravel_session=eyJpdiI6IkJcL2dJUEZ5Tm8rMlliTXNOeFhNcFJ3PT0iLCJ2YWx1ZSI6ImN0QThYeUZZcWNhRnQycEhqXC9QalM3dXZVaXpwajFFM2trejdIRU9rbHlZYXZHcGRPWDZyYmxad0Fmd2pZaTlPT3hqR1wvN1ppYlYyaFZxNEE0YkZMcEdiK2JWeHU0SW5lSEg0RTdtMmxsR2drT2c3SlNyTTJ6UzJPS2FuK0pLc3MiLCJtYWMiOiI1NDgyODJkYjRjZWMwODZiNTUwMTlkNzE1Mzg1ZjUwNTExYzg3MDQzOGQ5MzhjYmMyOTVkNTc1OGQyNzFkZTE3In0%3D

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



------WebKitFormBoundary9YyCqZ9eUD838dgZ

Content-Disposition: form-data; name="_token"



iDBeU9XAy7SaN5uftCe88zw0Jq5FVDzUg7rxsHRJ

------WebKitFormBoundary9YyCqZ9eUD838dgZ

Content-Disposition: form-data; name="name"





------WebKitFormBoundary9YyCqZ9eUD838dgZ

Content-Disposition: form-data; name="email"





------WebKitFormBoundary9YyCqZ9eUD838dgZ

Content-Disposition: form-data; name="password"





------WebKitFormBoundary9YyCqZ9eUD838dgZ--

HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 14:27:59 GMT

Location: http://b3789e93786d.ngrok.io/admin/users/create

Set-Cookie: XSRF-TOKEN=eyJpdiI6InRJVEFUVU9vN09ZZEt2NmxDWjdoZnc9PSIsInZhbHVlIjoiQk9PbVRjRVI0cmxoRTlZbDNuU241UG9uSlhGbm5GSHFTcmYrYjVJVGZJTUpCM0pwZHRJU0VpNVlcL0d6UWNPTlZaUG1ZUytiQm0xM1pKbHN1U0ptaUZaMm1pc1ozSzdsZ3cxNUJ2ZXVpZHFoM2RUU01LbVQ2cjNya1NyMk5PVUVWIiwibWFjIjoiMTAxNTYzMzljZmY3M2NhNGI1ZGY4ZTZhMTEyYzJjZTk2OTY5YzU1ZWE0ZDJlMjVjYmFhODc1YmQxZGYyN2VmZCJ9; expires=Mon, 02-Nov-2020 16:27:59 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6IjlGUzdvbmhGZ0FMbDhQOTN0Uko3T2c9PSIsInZhbHVlIjoidkRCZE1LeEh2RXU1aUZCeFNlRG5hd21sS3FNVk5XV0FXZXNlcHNvcndXTUtObW14SzhOVFhSdnVRYlk1VEthXC82TktDVEE0TXhkSU5lMVlyS0F5ZXFWXC9zMW52R2p2YVFudWVkUnhJbmhGQ3JwOHQ3bzJYR0JpN3phN0x1VW1qeiIsIm1hYyI6ImI2NGY0MjhmYzYwYWNkYzEzMTI1NTNmNDg5NTk2ZGU0MWNjMDI5YmNhMTU0NzNlNjZmZDI2YTE0YWFmYTdlZDkifQ%3D%3D; expires=Mon, 02-Nov-2020 16:27:59 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io/admin/users/create'" />

        <title>Redirecting to http://b3789e93786d.ngrok.io/admin/users/create</title>
    </head>
    <body>
        Redirecting to <a href="http://b3789e93786d.ngrok.io/admin/users/create">http://b3789e93786d.ngrok.io/admin/users/create</a>.
    </body>
</html>
HTTP request

Raw HTTP request used to retrieve the page.

GET / HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:50 GMT

Location: /login

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>
Proof
HTTP/1.1 502 Bad Gateway
HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/services/Copy%20of%20Copy%20of%20services./ab1eb814e8cb92c02ca86ed02a582b7ba2f5c864 HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Ilp2WjRLeHVlaDdnS3ZEUEswMVVWRHc9PSIsInZhbHVlIjoibmNcL0VMWVFMUEFVTk1laFFPV2ZKSDVpVkN0TndwUnJBUjlpOXZJR25lUENkSlhvdk1UUE8zS0pXZUxabURWdHhFbGJkZjJSQ2xUK0dQcUxqNGNBXC9icXZGRXlORG10QXAzckh3ZXlJbU9UbVF3dERBaXZXWXFmTDRFOFUwNEJkKyIsIm1hYyI6IjU3NmM3ZTU5NzRjMjRmZDlhNGNiNjBjMDFlY2VhOWE4MGZkMGEyOGU4ZDE4ODI0YjNiYjdjZTBiNGZmNjFkOGQifQ%3D%3D;laravel_session=eyJpdiI6Ik1CV0p5cVkzQWtpelZCdGF6N1VBNnc9PSIsInZhbHVlIjoiT1dHaEs2d05adUphMTV6Z0tveUtrdlwveTJENmJBRjh4a001SHQxUDRaOUlDSWhzSVVVdU16aGlzVWRXd2lCMHlnUFgzYm8wVWdnUThZUVRkMk9PXC9cLys4Rmd2NmROeFRZdnpYZVcwUHlWOHFKbGxlOFlMb0hHdnBzZUNSeHc0bTUiLCJtYWMiOiJjMDkyODc0ZGYyMDdmNDMwNWNjZWM5ZjRiNTQ3ZGM5NTQ4YjkxMDA0N2ZiYTMzZTA4OTA0YzI5NGM0YzcwMzczIn0%3D



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 502 Bad Gateway

Server: nginx/1.15.8

Date: Mon, 02 Nov 2020 12:20:18 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 157



<html>

<head><title>502 Bad Gateway</title></head>

<body>

<center><h1>502 Bad Gateway</h1></center>

<hr><center>nginx/1.15.8</center>

</body>

</html>

HTTP request

Raw HTTP request used to retrieve the page.

GET / HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:50 GMT

Location: /login

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>
Proof
HTTP/1.1 100 Continue
HTTP request

Raw HTTP request used to retrieve the page.

PUT /admin/services/Arachni-dc1fd3348d199f5e66655a1b9ebcc24e HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6IlhEZFJiZExFM3ZtUTNhSmM1NVNlS1E9PSIsInZhbHVlIjoiUjJYRENnZ2FBbjdENjNneE5JV0VkeCtxTkd3dnVxSDhoRXZ3TE5udDZ2S2IyQWU3aTViOUhOUWc4Sk5CbGtJTGRjU2UxOXNJRmd0YXZLcG9xREtuZVh3RnZNZFRGakxLV2cyQ1dXR1JzaG1KODFJNUdseHltZnVXSmc0aFFKUUIiLCJtYWMiOiI4OTA5ZjQzYzM2M2I5NjU3YzA3YTY1OGJjMmUzNDhhMmI2MmY5MDIzYjgwYWE3NDlhMGM2Njk4OWFmNzM2OGZjIn0%3D;laravel_session=eyJpdiI6IlMrTDZvdlJPajRSY2lROVwvaDM5VDZnPT0iLCJ2YWx1ZSI6InV3emtEbnh6MjBlZUpkUW41MjdWTkpST2lzXC9UYno3ekMyVE9mTThCSEZrb0VOYlZMY3hudDA5aGRGTVh5NkR4c3hHMmg5YlJRQ2FPSm9CaE1kR3Uwcko1Szl5M0RjUE50YnZMWURiM0RmdEpXc1VLOVlSTm85TWNJSWRDbTIwOCIsIm1hYyI6ImQ4ZjVjMDdjZTUwYjdmZTc4YjdjYWQwNDhkZThlNjQ4MWYzMmNjMWZjYjcwMDg1NDVmMGEzNTRlNWNmZDFjYmYifQ%3D%3D

Content-Length: 55

Expect: 100-continue



Created by Arachni. PUTdc1fd3348d199f5e66655a1b9ebcc24e
HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 100 Continue



HTTP/1.1 419 unknown status

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

date: Mon, 02 Nov 2020 12:20:16 GMT

Set-Cookie: laravel_session=eyJpdiI6Ik4xSkFQQ1wvQ2d0MXU4OFVTV1d3bFR3PT0iLCJ2YWx1ZSI6ImxmcjlkbGhnQVZBUHBnWlVweUxaS1hGalwvTDUzU0V1XC9LSmdoRWREODM4YVwvZUU1b1gwTmlFcmcrV0N4YTlnOXlLTXcrTWU1dFhMbHNXT3NteGpcL0tqa1F0b0U1UE1WNGtuWVBWK3ZCb3c0Z2xaRzdidElDOHZyNmVTMGVqcXJ0cCIsIm1hYyI6IjkyNzE2ODI1YzVlNjYzODM2MTFlMDZmMDcwZWNjNjgzZGYwNjcyODQ0NmRiMzZmNWZkY2E4YzUwZjk2MGE0ZWEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:20:16 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html lang="en">
    <head>
        <meta charset="utf-8">
        <meta name="viewport" content="width=device-width, initial-scale=1">

        <title>Page Expired</title>

        <!-- Fonts -->
        <link rel="dns-prefetch" href="//fonts.gstatic.com">
        <link href="https://fonts.googleapis.com/css?family=Nunito" rel="stylesheet">

        <!-- Styles -->
        <style>
            html, body {
                background-color: #fff;
                color: #636b6f;
                font-family: 'Nunito', sans-serif;
                font-weight: 100;
                height: 100vh;
                margin: 0;
            }

            .full-height {
                height: 100vh;
            }

            .flex-center {
                align-items: center;
                display: flex;
                justify-content: center;
            }

            .position-ref {
                position: relative;
            }

            .code {
                border-right: 2px solid;
                font-size: 26px;
                padding: 0 15px 0 15px;
                text-align: center;
            }

            .message {
                font-size: 18px;
                text-align: center;
            }
        </style>
    </head>
    <body>
        <div class="flex-center position-ref full-height">
            <div class="code">
                419            </div>

            <div class="message" style="padding: 10px;">
                Page Expired            </div>
        </div>
    </body>
</html>
HTTP request

Raw HTTP request used to retrieve the page.

GET / HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:50 GMT

Location: /login

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>
Proof
HTTP/1.1 302 Found
HTTP request

Raw HTTP request used to retrieve the page.

GET /admin HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Cookie: XSRF-TOKEN=eyJpdiI6IkFtQTN4MnE1SVwvRENYYkVscGI0cGpBPT0iLCJ2YWx1ZSI6IjltOHhpemEzYlY1VHROOWVqMmNKam9ncCtmdTZqN0pxSEJheFFocGllM2cxNW1FSG9JU0JiZGdoQyszOXZaRkdJY0I3SzZoSHkrT0tQVUl2TXBST0E0ZHFKQXFuZUdua3J0bmZQZ3hPaGRGeXRlb3VWUW9nZ21uZ3o1SlFYc0FrIiwibWFjIjoiNGI2MDVhNTlhMjUxM2Y5NDBmOGYwZDdjMTljMDZhOTJmZDljZWJiMDY0MjMwYzY4NmJjYWMxOWU1NzE2YTIxZCJ9;laravel_session=eyJpdiI6IjA3TDIzWlJTWVJzc2JOMkdcL2FhUTVRPT0iLCJ2YWx1ZSI6IlFUNk41ZHp0amsxa2NcL3RVZitQcHNDTFpGOTBtc3BsWW5xYWZOQ2ZXUlFcL2ZqMXUxVE9UbXlac0sxc2sxdDV5Qmx2OE52Mk1YMEFHYjVwbHZzV2NyUFoxVkZzT0UzVFRjdHdUNUFicGIrS3pMSE9LcXZVbHg0TDRlMjRpXC80a3krIiwibWFjIjoiZjE1OTk2ZjY4Y2U3NWI3MjI1Y2JiN2E5Mzc0ZTA4NGU4ZmVmNWQ2YWQ5ZDBkOTYxZjRhNThlMmU3ZWNlNDY3YiJ9

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:19:52 GMT

Location: http://b3789e93786d.ngrok.io/login

Set-Cookie: XSRF-TOKEN=eyJpdiI6InN2UVFcL1pTeFwvVU9VTDRrMGNXTGcrUT09IiwidmFsdWUiOiJKdDRIRVJqXC93bVBDa3ZJQVNKN0VWU0J4UExlQnd0azlKRUU0eVwvTkxIa1FMR2o3bnFNd2thRTRBeGpHS3JSOTJ0ZnEzaXBFQ1JMZm9XY204TG9WZEg3RnhYRTJrcUhzamNWTFF5R3l1M29TM29zekRLekUyUlJpS3I0c2UxK1ZhIiwibWFjIjoiMTY3ZjBhOWU3OGVmODdhMzUwNDllZWM4MDc3YzQ3MzkzMzVlNTBiOGUxMTdlMTVjZTA0YjNlZDczNzM5NDBjNyJ9; expires=Mon, 02-Nov-2020 14:19:52 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6IjdaMXhZN29kVVV6ZjRZeGV6TEZiNWc9PSIsInZhbHVlIjoiTUNSREZoMkdVeE1cL0hWcUJRZDB0aHBuXC9ZdzQ3a1k5MGRLR0ZaS2FQZWZoT3ZrNUlIdzg2Y29ya0pVeWtIWCtWNWpRZlNvUUliRTYyWWNCWnVMcHo0UVNRQ1hNXC80WFNMcVRwNm5xbWdQaGxFVHRPWit1QURlMytiWk51R1Y0em4iLCJtYWMiOiI2NmJjYmVkZTBhNDhmMzU2Y2I4YjhkZWRhOWQ3ZmU0YzMxMWRlNzBmYzkyODk0YzM0YzM2NjdlMjg3ZTYxMTA3In0%3D; expires=Mon, 02-Nov-2020 14:19:52 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io/login'" />

        <title>Redirecting to http://b3789e93786d.ngrok.io/login</title>
    </head>
    <body>
        Redirecting to <a href="http://b3789e93786d.ngrok.io/login">http://b3789e93786d.ngrok.io/login</a>.
    </body>
</html>
HTTP request

Raw HTTP request used to retrieve the page.

GET / HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:50 GMT

Location: /login

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>
Proof
HTTP/1.1 302 Found
HTTP request

Raw HTTP request used to retrieve the page.

POST /logout HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin

Origin: http://b3789e93786d.ngrok.io

Content-Type: application/x-www-form-urlencoded

Content-Length: 47

Cookie: XSRF-TOKEN=eyJpdiI6InpcL3ZsMlpZVjF6ZlcxeHlMWUVCNVd3PT0iLCJ2YWx1ZSI6IkM2eWpjSFdrTHUySXJ3MjJXTmhvMXBhNVZWMzFqcWdyNFVjcVlxcDVURllVK1lIVUwyMno5TE0yNElaZ0xEM1ZCUlVkc2RqQ2ZKWWFBVTQ4NHFIeDlPMHl3UEdZTU91NHFMZmEyNDVyMmt4VytCamVWWmp3dFc4R3YrZVhpMDY0IiwibWFjIjoiOTRmZWJkMDE1YmVkNDUxMzAwNGY0MTI1Y2Y0Yjk5N2Q0MGY2NzMwNWUzYjdlMWMwYjFjZjQ4YTJiZjE4YzliMSJ9;laravel_session=eyJpdiI6IkVHdVRVV1JKSVB5emhRQndCY1U4cUE9PSIsInZhbHVlIjoiVENTVTRqdkgrS096TlBQNmp0SkorOUV2KytTVUowakVsbW5Nd3lBQmVEeUdsTVlpTEJrR2ZFM1BhOWxKamQ2WXFpXC82NmlHWTNpWU5oV3ExZWdiTWE0SEdhbEFib1dsOEdST2p2RzNnbVBYY1BKT0ppaFNUb1R3QmdZbDRcLys1ZiIsIm1hYyI6IjY5NzQxMDFjNDhjZTA5ZTkyNjZkMDU2YzJhNTU1MDdiZGM1MjgwNmQ1NWRhZTNiM2M4MTEzNzViMjg2NzUyMzUifQ%3D%3D

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



_token=Mlxj8gs7SepUXph22uP6hq8EK2NQ1eBX0MdqsoTz
HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:19:18 GMT

Location: http://b3789e93786d.ngrok.io

Set-Cookie: XSRF-TOKEN=eyJpdiI6Ik9tZmVZd2VuQVUzQmlVZmtERis5M0E9PSIsInZhbHVlIjoiclh6U2pzRzU0Mkw4aXpOOWRvdTNXNUVhT3JFTWNNSzJyVE14WDZBZXBqTEc0ZFBLS2VVclZBUzRleVhzekMzbDY1WEJ4SXI3Y1F5VDNoRUxocEREdDNidEJ4QnBuWjUxcEpJb1VBYjc1eWlKOUZISXJuWGlxN0tidG1GYUpESHgiLCJtYWMiOiI4M2VjZTU2NTE5NjhkNzViN2NlZTYzMTEzZTc3NTM5YWI2MDJlZTg1YWEyNWNlN2E4ODZjYjE4NTUyMGJmZjc3In0%3D; expires=Mon, 02-Nov-2020 14:19:18 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6IlwvVVwvRVNuU2hXKzcxbExMZ1VHaDBFdz09IiwidmFsdWUiOiJZbHFONEZ3d3R3bSt4dHBUR2RCRnNXZ0R2VnQ1WTc0WmxzaU1UZVRGKzRsSmd3SFIwaUpBNWpGYnJZS3I3VUFxdEVpZ3ZSVjBKM2JSZTZSTGdrUkZqb2pZOXl2em1hWmU5RHFvT2FESmI4MUI1ZE9XOCs3bnlqZTdLMUpZcks4QiIsIm1hYyI6IjZmODgwMjNjMzJjMDQ1NmQyYmVjNzJlYjg1YTcwYmJkYjIyMjUwMGQwZjAwM2E3NjU3OTY5ZGM0MzQxYzA3ZjkifQ%3D%3D; expires=Mon, 02-Nov-2020 14:19:18 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io'" />

        <title>Redirecting to http://b3789e93786d.ngrok.io</title>
    </head>
    <body>
        Redirecting to <a href="http://b3789e93786d.ngrok.io">http://b3789e93786d.ngrok.io</a>.
    </body>
</html>
HTTP request

Raw HTTP request used to retrieve the page.

GET / HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:50 GMT

Location: /login

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>
Proof
HTTP/1.1 302 Found
HTTP request

Raw HTTP request used to retrieve the page.

GET /home HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6IjZFQjMzNm5oVVhTcWFpZUtyZHlGVkE9PSIsInZhbHVlIjoiSjFlQUIrdTEyVW5lUGEyVXNcLzRJM1QwajY1TEF4ZFY3OUFCRUo2UW9VWDE2dk1kTE1lRytZTWZIM3VianoyN0s3THJIRGVibkx5UzVKU1poOU4rV0xZNWlhNFVUYWxwVkZWMGVTNnBUZnF5VitaNXVUXC85Njcxdm1TdkZXZ1RTcSIsIm1hYyI6ImIxOWFhYTcxZDMwZTk2ODUzOTM5NzZhMWJkMDg0MjgyYjZjNWM5M2U0MTUzY2I5ZWIyZmRhOGNhMDk2ODRjNWYifQ%3D%3D;laravel_session=eyJpdiI6IlwvNHZ0Z3V1am9DVW9DYWh3dFpSMUh3PT0iLCJ2YWx1ZSI6ImVFY2tDa29IU3pXa2JRUEtvbzl3ZGdKMjZjVGpBOXVxcHZFZjFPeHhoQ3NydnJJa21mbHd1M3JpS1E1cHJENlZwbktuWjViXC92WTV1eUErTk5UaUR0WTFRcHNhT1ZvQlhBazl2aExDK0NBaStXb05DXC9XOEhCZGZKRGt4UmcxNFQiLCJtYWMiOiI5MDY2OTQ4OGQ5YjEzNzNkNmNiNTY4MGQ0MmRkZjZiMzU0ZmIyNmQwZjQyNTVmNGQ2ODNhNTE2Nzc2OWRhMmYyIn0%3D



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:57 GMT

Location: /admin

Set-Cookie: XSRF-TOKEN=eyJpdiI6IkpoSDd5SUh6RXd6bTRTeUx3c2RIWnc9PSIsInZhbHVlIjoiRDRNNTdnZFBSY2x4bHJDNm55MmVNWURlZTJpalVBbTh4UW9vRVdPMXorbnQranZRTzRhK3BBeEtcL1pEMWRESTlGd1p6Vk9RbzNLQjArZE55Um5iRU10OUFMNGd1MVZmSGRIWHh4aTBiQUJBTHBtVVNIUVZvYU91VmYwa1hyRGZHIiwibWFjIjoiMjQ2OTY2MTQ1OGIzZDE0MjU2ZDdkNmM1NjU5MmYzNGUxZDQyYTU0ODk4NzgwMTg5ZTRiYWU5ZGRkNjgzMmU0MyJ9; expires=Mon, 02-Nov-2020 14:18:57 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6ImRwTUYrVlpVOVdzTlpyQnZKRlRuSnc9PSIsInZhbHVlIjoiWUlrcjgydDZORXhQaHBJZ3haTlN0dnE5WWZ6aitiaURXMUpPYWlrSlZKUk5JSG41eGZreGd2MjZPdTZia2d4WGlDaDQ0VHZ4RkVIbk9JMnJaTEpNVmQwWGRUZXBKTGtGTHM1ZlkxYjd0RGpUdmlRWHBHRytMaDdkVzRvV09SbnMiLCJtYWMiOiI1NTY0ZWQ4YmI0ZDMzZWEyM2Q0ZWMyYjI1ZWVkZmIxYThkZThkMTMyMjgyMDBkY2M3ZWNkZWU4OWY5ZjMxN2UyIn0%3D; expires=Mon, 02-Nov-2020 14:18:57 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/admin'" />

        <title>Redirecting to /admin</title>
    </head>
    <body>
        Redirecting to <a href="/admin">/admin</a>.
    </body>
</html>
HTTP request

Raw HTTP request used to retrieve the page.

GET / HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:50 GMT

Location: /login

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>
Proof
HTTP/1.1 405 Not Allowed
HTTP request

Raw HTTP request used to retrieve the page.

OPTIONS / HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D;laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 405 Not Allowed

Server: nginx/1.15.8

Date: Mon, 02 Nov 2020 12:18:53 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 157



<html>

<head><title>405 Not Allowed</title></head>

<body>

<center><h1>405 Not Allowed</h1></center>

<hr><center>nginx/1.15.8</center>

</body>

</html>

HTTP request

Raw HTTP request used to retrieve the page.

GET / HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:50 GMT

Location: /login

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>
Proof
HTTP/1.1 302 Found
HTTP request

Raw HTTP request used to retrieve the page.

GET /login HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6IkhrdzZuNmdxZVYrNUdtbmlyNTQ5ZEE9PSIsInZhbHVlIjoiVFdwVVV3WWhGQ3hYbW9cL1pkVmI2cmFcL3dxTGFVN3R2Q0V5dW8rcFJTS0NJaThxTUJqU05KanlzeEIyVnRSVXFjeVc5V0YyRHJaTDNSeGV6S0FReVZqNHBXT21keDNpbXlQZlJEU2lUdFVsaTFPY2s4alY2eCtlOUZWYjRaczExTSIsIm1hYyI6IjMxZmEwZWI5ZDk5ZWYxN2MxMzM4ZDVkYjQ0NWY4ZTcxNWUyOWY2ODg5ZDEzYTJiMTA1NjFjZWM1NTY1YzVhZDQifQ%3D%3D;laravel_session=eyJpdiI6IjdzRUlzUnF5VTBkOGxUYW9IdStORnc9PSIsInZhbHVlIjoidytnRlRGZG0zcWhKZzhURG83dE5DeTF6MlRRRFBvVHhmSWdPc0hrbmRlVTJwcWVsZVZKTDk5ZWhVTDIzSHg0ODJVNTh4c0Q1YUJzUWpiS1BDeW93MjRrcGl6UzhJTzloN0wrVGxZR1BjdStSV3pNN1hKZVczazEyVXE3V243bmwiLCJtYWMiOiJlNzMwZjE0NWYwZmUyY2RmODBkZmFlNjQxYmY2NDcwM2MzODEyM2E2ZjkyNzUyMjBiZDc0ODZhMzgxMzI0NWUyIn0%3D



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:53 GMT

Location: http://b3789e93786d.ngrok.io/home

Set-Cookie: XSRF-TOKEN=eyJpdiI6ImM4RG00WE1oY2NQU0V6OUVEYVwvcWZRPT0iLCJ2YWx1ZSI6Im5zTFBKQyt5d0QxU05xell6ZVZaakFaSU5GaHFoWjlXV3Fac0RXd2N0Mkd4MVVUMk1KMUl1cUhWSFVDbm11T050c0xZckQzV1hDbDJXanUxNTI2SUZcL0l4TzhDMWhvUDg5Qm1wWlJTTEF2SXAxTWVBUnpZWGJKWnhSclczV0xHUCIsIm1hYyI6IjJkYzgyZjljMjlhNDlmYjFlMDA5NTMzMmUyMmE1MDMxMjRjZDc4MjJlY2U4NzQ1Y2QyYjdhM2I5Y2Q4ZWFjMjYifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:53 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6IlwvRjczVVBCajc3UjBIR051MXVhWmZBPT0iLCJ2YWx1ZSI6IjRpSmlFMFVvM1dGdzU3aVR4dTdmWmR5SkY4eEc4N1hlZ3p4SmJxNllESndtR2NJNmI5eWZGbE9tN1lqVnFwTDhjbVRqZjdEYlFQXC9Wc1ZwaXRXK2JzM1ErVE5LZDZOdHVjQ2xxUXgxaENDQm94dHhoTGo0Y3hYMmozUGFmcHlTbiIsIm1hYyI6IjI4NTcyNWZkZDYzZjRjOGFlZmJjNDkwNzhjYmRmNzQ0Mjk0M2U4OTg0OThhYWM5N2U2NTUyM2FjZDMxOTQ2N2UifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:53 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='http://b3789e93786d.ngrok.io/home'" />

        <title>Redirecting to http://b3789e93786d.ngrok.io/home</title>
    </head>
    <body>
        Redirecting to <a href="http://b3789e93786d.ngrok.io/home">http://b3789e93786d.ngrok.io/home</a>.
    </body>
</html>
HTTP request

Raw HTTP request used to retrieve the page.

GET / HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9;laravel_session=eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:18:50 GMT

Location: /login

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjMzTG9CbmxWNjJweUNZTFZTRmpVQUE9PSIsInZhbHVlIjoiZ0xEamxXajJRSWZUM1ZwY0RKdEIwclBGQ1FaR1Vtd21iZmFXekRSd211UDJRN1EwdUwzUnJIcDFpNktTdzh4VHUwRVdcL1dxSEcrSWNRVlJyMVwvWEJvcldmM0huTEh1N24zZFdwd1N6UFo4UXB1elJjdHhqVUlPVnB2YWloMURnWSIsIm1hYyI6Ijg0ZWI2NDlmOTZmYWM4ZjZkNTIxZDM3MjBhMmNhMDMwOWU0ZDk4MDYzMWMxNDU0NWYxN2Y2YWQ4ZjIzNWY2OTEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InRDWGIxa3FMejBjVHBuSHZRd3ZwXC93PT0iLCJ2YWx1ZSI6IjlhWjBNdHUxXC9NNllQVTBTcTM3V2NvUUdKVnV6TGVjaGZ3T091bFNwOWFHVFJSYWFpb2FNS1RQeDVZQWlVSzB2TWRKT0VTZnNYMWV1QnBCTlA1Q0lDSFNsNWhRejgwZlA4Z284U3NMSzNYNFg0ckhueFo4N05KSlZcL2w1SzRGb3oiLCJtYWMiOiI1NjE3OGY5ZWI5NDQwNGQwMzI2NmI4NzE4MDM2ZjJlNDM5YTlkNjI0YjEyZmY0YmFiMTNiZjA1NjZiN2YxNjFjIn0%3D; expires=Mon, 02-Nov-2020 14:18:50 GMT; Max-Age=7200; path=/; httponly



<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='/login'" />

        <title>Redirecting to /login</title>
    </head>
    <body>
        Redirecting to <a href="/login">/login</a>.
    </body>
</html>

These issues are considered untrusted (and may in fact be false positives) because at the time they were identified the server was exhibiting some kind of anomalous behavior or there was third party interference (like network latency for example).
The listed issues need verification by a human.

Backup directory 11 backup_directories

A common practice when administering web applications is to create a copy/backup of a particular directory prior to making any modification. Another common practice is to add an extension or change the name of the original directory to signify that it is a backup (examples include .bak, .orig, .backup, etc.).

During the initial recon stages of an attack, cyber-criminals will attempt to locate backup directories by adding common extensions onto directories already discovered on the webserver. By analysing the response headers from the server they are able to determine if a backup directory exists. These backup directories can then assist in the compromise of the web application.

By utilising the same method, Arachni was able to discover a possible backup directory.

Remediation guidance

Do not keep obsolete versions of directories under the virtual web server root.

When updating the site, delete or move the directories to a directory outside the virtual root, edit them there, and move (or copy) the directories back to the virtual root. Make sure that only the directories that are actually in use reside under the virtual root.

Preventing access without authentication may also be an option and stop a client being able to view the contents of a directory6, however it is still likely that the filenames will be able to be discovered.

Using obscure filenames is only implementing security through obscurity and is not a recommended option.

System components have attached some insights to this issue.


  • Check
    • Identified by converting the original directory name of '11' to '11 (another copy)/' using format '[name] (another copy)/'.
  • Meta analysis
    • This issue was logged by a discovery check but the response for the resource it identified is very similar to responses for other resources of similar type. This is a strong indication that the logged issue is a false positive.
Proof
HTTP/1.1 200 OK
HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11%20(another%20copy)/ HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:56:31 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6IklaREdBSzRTM3A4TzA4Z3phU1ZQZnc9PSIsInZhbHVlIjoiQzlEa3JNQ0ZnWGtuUFwvc0RVUUJ5a2ZhU0h0VkF3bDJMUXRzdTNRdTlPR05uXC9jOVBCQmlpdVRDcVZ6Nnk4dGxXWGxHenY3VzcxbjZpVnJtZWYrbjhxYXFuK2llMm9xRndWdEJaZGMraVwvaFJ6ZmhIVTVjMllleVVZOVJmXC9wTTVaIiwibWFjIjoiMGZhYWU0ZDQ4OWMxOWU3MjExM2QxYjJjOTU3M2RjMzRmYTA5ZTM3N2I5YjYzNDMyOGZlZGY5OTY2N2M5MGIyNyJ9; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6IlJsamR5TUxkVkdJcW14VHRsZzdEUXc9PSIsInZhbHVlIjoiVUw2SEx0SzRmM0VkWkdhTzU2WHlIVUpRTEdDbGdUT1ZwanNjMEJHSEJWMGNuSnV6T0phdmtzYVFQaFwvTlwvWFlGXC9jOEtnVWIrMERVZzRzYmJtN0lnVWs0V01JSVI0YUxzZHV3WWRBOVwvb1FFMFJiUE92MjB5VlAwR3BkSTZUK2MzIiwibWFjIjoiMzQ0MDViYTdmZjRjZWRjYTdlOWI0ZTg1NjRiMWZiMTNkZjhmZTRlNjIwZDQ1NjU1ZTQ0Y2YwYzNhMmM4YmJkMiJ9; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11/edit">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
    <script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
    <script>
        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
    </body>

</html>
Transitions

Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.

# Time Event Element Options
0 1.860287 load page
URL http://b3789e93786d.ngrok.io/admin/permissions
1 1.31688 request http://b3789e93786d.ngrok.io/admin/permissions
2 1.77744 click <a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
3 1.07014 request http://b3789e93786d.ngrok.io/admin/permissions/11

HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11 HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/permissions

Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:48:55 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>
Browser-evaluated body

This is the browser-evaluated body, as a result of the listed transitions.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
<html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->




    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet">
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet">
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet">
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    


</body></html>
HTTP response body

This is the original HTTP response body.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>

System components have attached some insights to this issue.


  • Check
    • Identified by converting the original directory name of '6' to '6 (another copy)/' using format '[name] (another copy)/'.
  • Meta analysis
    • This issue was logged by a discovery check but the response for the resource it identified is very similar to responses for other resources of similar type. This is a strong indication that the logged issue is a false positive.
Proof
HTTP/1.1 302 Found
HTTP request

Raw HTTP request used to retrieve the page.

GET /login HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6IkFUc3RCTVB0NkRNaGlQaDh4YUZybmc9PSIsInZhbHVlIjoiMjdleEMxaUNEcVwvRElUenlVMUhhdGUwaGt0YnNGYjZNbFwvUTFaenNITHJRZ2lkMzJyZWJJV0NTaHV2NFhldHFlbjB0N01Pd1ZwaWJMaU5FQkRpZ091dHlCMmszZnZnSFRRNWp3WkdxNks0eDJFY0JiWWFSekZMRmRNZ0R6UDBKcSIsIm1hYyI6Ijg4ZmZmMjY3ZDdlNjU0NjFjNGI1OGU2MmUxNTc1OGFjZTk5NTcyZGY5YzFlMTkxZTBkMTNlZGFlMzZlYjk2ZTAifQ%3D%3D;laravel_session=eyJpdiI6Ijlpd3FOYVY3cjMwV1wvUkZmZVI5VmlBPT0iLCJ2YWx1ZSI6Im11c1BLbEtnVWttSHZ5NWdvTWl3cXpvVlpRajh1Qm9aVG5KUVwvVlhIaXAyQitvTjNoQnhaYWo2aTNQQVhneVwvdWlubm5PcTBtamNIYjYwdFZzUityS1U3VFwvQnNjM3JEaXNldGR6M2JyeG42MzErQStVZWpZTlJFY21Uc0FsM1lQIiwibWFjIjoiMGUzNmE5ZmVhMGNjZmEzMmU0N2YyYzgwOWFkNjU5OWNlZTBkMTAzNWFhMDFjZTg5ZDE4MDkyODc5ZDY4NDE0OCJ9



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 302 Found

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:51:00 GMT

Location: http://b3789e93786d.ngrok.io/login

Set-Cookie: XSRF-TOKEN=eyJpdiI6ImxRazRsWnBENmpmSDc5VnFRb2FWSFE9PSIsInZhbHVlIjoialdnbmdjME5UVGhqRXRUaHY3TjVlYTZ2ZXBDOHQyTnZmenlOaCszQ1RzOHRCZGxidjVnVURBdlZXS1VZMWFnZ0NGXC8yd2NZRWl2K2J0Wjl5S2FHalc4NzUzRkl2ZEJuQXNNRlRXZTZSdHdTN1JaSFlWXC8wbTlHanVqdEF2enRoSSIsIm1hYyI6ImVjNzZiYmM1YTczMzQ0MGU4YjVjZDY5Y2I0NzNkOWNlNzIzNDAyZGQzZWQ0Njg0MWZkZGFkYmM3ZmJkNWE1N2QifQ%3D%3D; expires=Mon, 02-Nov-2020 14:51:00 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6ImRjU1VidVwvTGc1U2JVZXEwbm9wanV3PT0iLCJ2YWx1ZSI6IktDcis2WlZ4dmVjVkg5aDM1Y3lKanQwVytJY21ESDcxVTdKUFwvc0JRaTE2RGVFQlBzWVBUcVwvdXNET2t5QUZQclBSaERsUEFYRFVTdTRLMTdXVUpSalwvT1l6N2Y3czFsYmViMUVwTE5vcmYya3FlYXNTXC8zZkJvbm1BMVNvemE3MiIsIm1hYyI6IjNiNWNmNTJiY2VmNmM2NTI3NGMxMjlmNTAxZGVjMjhjZDlhMGJkM2QxYjBmMmUwMmU1OGRlMGM5ZDk2OGViODgifQ%3D%3D; expires=Mon, 02-Nov-2020 14:51:00 GMT; Max-Age=7200; path=/; httponly



HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:51:00 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6IlplclI3TXpTYVFXaHlONGlsbmt0OEE9PSIsInZhbHVlIjoiUFZ0TmZNbDVQY0NpNkxPZUpXWnlYSE1QSVh3S29XamdJOERSdkZIMlVvVWlDWU9iWWpWTDMwd3N0Y3V0TTEyR0FXZGZJdVdoNTdnQTF0cEs4WGtJK3poa0puQXF2eDEyODhUT0FDNVFKckdVT1h0Z3dPU3NDZml3ZmhZdDU2THgiLCJtYWMiOiI3MmFlN2NjZDRkODdiMzQ2ZjliYWU5ZGUzMDYzOGExN2UyMzg2ZTYxNmQ0ZTljNjdkY2JhYmVjODM1ZmFmZDkxIn0%3D; expires=Mon, 02-Nov-2020 14:51:00 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6ImxzZ3FSMVhCQzZBRXJMZkVUMUZVR3c9PSIsInZhbHVlIjoiQjFDR1FNV1RxQ01kS0tOdHh4YkdYXC9LSWViR2s4b0RlRHJyczNncUMzM0ExVzFLM2JYUjkxWG1LNlhUV29FU2MwcSsyODdLVm5CeHc4ZlNkcWRVQmlNb1wvTzlQVkRCalRjNlZGYTZtWHdHNTl2amJicVpUZmk5WjNcL1pwTTV1UHMiLCJtYWMiOiJmY2VhN2I4YmEzMWM1MWJjN2I4Yjg4ODQ3NjY3ZDM0Nzk5NTQ3YzhjMzFkZmIyNTQyNzg5NDUxYjZkYTliZWM2In0%3D; expires=Mon, 02-Nov-2020 14:51:00 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="K4OVTMgVoSfY7hJ7ot9bpskSkJD7l8VbzookoAlh">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="header-fixed sidebar-fixed aside-menu-fixed aside-menu-hidden login-page">
    <div class="app flex-row align-items-center">
        <div class="container">
            <div class="row justify-content-center">
    <div class="col-md-8">
        <div class="card-group">
            <div class="card p-4">
                <div class="card-body">
                                        <form method="POST" action="http://b3789e93786d.ngrok.io/login">
                        <input type="hidden" name="_token" value="K4OVTMgVoSfY7hJ7ot9bpskSkJD7l8VbzookoAlh">
                        <h1>Appointments</h1>
                        <p class="text-muted">Login</p>

                        <div class="input-group mb-3">
                            <div class="input-group-prepend">
                                <span class="input-group-text">
                                    <i class="fa fa-user"></i>
                                </span>
                            </div>
                            <input name="email" type="text" class="form-control" required autofocus placeholder="Email" value="">
                                                    </div>

                        <div class="input-group mb-3">
                            <div class="input-group-prepend">
                                <span class="input-group-text"><i class="fa fa-lock"></i></span>
                            </div>
                            <input name="password" type="password" class="form-control" required placeholder="Password">
                                                    </div>

                        <div class="input-group mb-4">
                            <div class="form-check checkbox">
                                <input class="form-check-input" name="remember" type="checkbox" id="remember" style="vertical-align: middle;" />
                                <label class="form-check-label" for="remember" style="vertical-align: middle;">
                                    Remember me
                                </label>
                            </div>
                        </div>

                        <div class="row">
                            <div class="col-6">
                                <button type="submit" class="btn btn-primary px-4">
                                    Login
                                </button>
                            </div>
                            <div class="col-6 text-right">
                                <a class="btn btn-link px-0" href="http://b3789e93786d.ngrok.io/password/reset">
                                    Forgot your password?
                                </a>

                            </div>
                        </div>
                    </form>
                </div>
            </div>
        </div>
    </div>
</div>
        </div>
    </div>
    </body>

</html>
Transitions

Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.

# Time Event Element Options
0 1.860287 load page
URL http://b3789e93786d.ngrok.io/admin/permissions
1 1.31688 request http://b3789e93786d.ngrok.io/admin/permissions
2 1.984026 click <a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/6">
3 1.287882 request http://b3789e93786d.ngrok.io/admin/permissions/6

HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/6 HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/permissions

Cookie: XSRF-TOKEN=eyJpdiI6IjN1VTdiUDNxeHhMcWtSQjZKWGo5d0E9PSIsInZhbHVlIjoieG5kZmZoVmFMZEVnZWhHXC9paENnRWRrUXpCb1ZyNUVVeUo4d1M4RTRLYjBJbkoxdWNYYXI2aFhubmhvTFRyUEZWMjQ4a0dBczNDREhISVROT3Q2OVd1Y0ZuOGVzazZmaGlVck52VGs5WjlQRytBblVPWFppXC8rK01QUStHNU5QWiIsIm1hYyI6ImJkY2RkNGE3NzBmNTRmOTY5NTZlMzYxMDhlZmI1ZjY3M2RmMTg5ZjgxOWUzNjE1M2U0OWQ1MWZiOGUzMDMwMmEifQ%3D%3D;laravel_session=eyJpdiI6ImhxdXNVN1VcLytGdW5WdFFid09ZOTBBPT0iLCJ2YWx1ZSI6IlhBZGlEVm1GODJTcXd5ZVwvYVF2M0tSd1JWWkUzUWZXU0MwSThBRzJhQjl1b1dIRERlbGdWYkxNXC9CRFwvOUhkeHVxTkJZTWJqeTdyRE5lXC92cGRNa0NyVG5DWFJJQXdpbm9VdVVpVGE5RDhtR1E1cERSOEJkbEdJWnN4WnFSMEJjUCIsIm1hYyI6IjUyMjJiNDUyMGI0NTdiZjFkNmYyZDNhYzA0NzFiZTg1YmYyMjJhZjk5MWZkOWUxZWRhNDhhOGU2ZmExNDgyOTQifQ%3D%3D

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:48:12 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6IkFUc3RCTVB0NkRNaGlQaDh4YUZybmc9PSIsInZhbHVlIjoiMjdleEMxaUNEcVwvRElUenlVMUhhdGUwaGt0YnNGYjZNbFwvUTFaenNITHJRZ2lkMzJyZWJJV0NTaHV2NFhldHFlbjB0N01Pd1ZwaWJMaU5FQkRpZ091dHlCMmszZnZnSFRRNWp3WkdxNks0eDJFY0JiWWFSekZMRmRNZ0R6UDBKcSIsIm1hYyI6Ijg4ZmZmMjY3ZDdlNjU0NjFjNGI1OGU2MmUxNTc1OGFjZTk5NTcyZGY5YzFlMTkxZTBkMTNlZGFlMzZlYjk2ZTAifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:12 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6Ijlpd3FOYVY3cjMwV1wvUkZmZVI5VmlBPT0iLCJ2YWx1ZSI6Im11c1BLbEtnVWttSHZ5NWdvTWl3cXpvVlpRajh1Qm9aVG5KUVwvVlhIaXAyQitvTjNoQnhaYWo2aTNQQVhneVwvdWlubm5PcTBtamNIYjYwdFZzUityS1U3VFwvQnNjM3JEaXNldGR6M2JyeG42MzErQStVZWpZTlJFY21Uc0FsM1lQIiwibWFjIjoiMGUzNmE5ZmVhMGNjZmEzMmU0N2YyYzgwOWFkNjU5OWNlZTBkMTAzNWFhMDFjZTg5ZDE4MDkyODc5ZDY4NDE0OCJ9; expires=Mon, 02-Nov-2020 14:48:12 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="jRf7G3247SuKL6ovUuJaNENQ2el0SeMV4RjNK8c5">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            6
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            permission_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="jRf7G3247SuKL6ovUuJaNENQ2el0SeMV4RjNK8c5">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>
Browser-evaluated body

This is the browser-evaluated body, as a result of the listed transitions.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
<html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->




    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="jRf7G3247SuKL6ovUuJaNENQ2el0SeMV4RjNK8c5">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet">
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet">
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet">
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            6
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            permission_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="jRf7G3247SuKL6ovUuJaNENQ2el0SeMV4RjNK8c5">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    


</body></html>
HTTP response body

This is the original HTTP response body.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="jRf7G3247SuKL6ovUuJaNENQ2el0SeMV4RjNK8c5">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            6
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            permission_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="jRf7G3247SuKL6ovUuJaNENQ2el0SeMV4RjNK8c5">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>

System components have attached some insights to this issue.


  • Check
    • Identified by converting the original directory name of '11' to '11 (third copy)/' using format '[name] (third copy)/'.
  • Meta analysis
    • This issue was logged by a discovery check but the response for the resource it identified is very similar to responses for other resources of similar type. This is a strong indication that the logged issue is a false positive.
Proof
HTTP/1.1 200 OK
HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11%20(third%20copy)/ HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:56:31 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6IlAzY0dPN1F1OThjSDNITW95QkhieEE9PSIsInZhbHVlIjoibnBYTFo0YzZLK1pBblM0ZUtuN2JPVDVZNFJhdDlNTkZmcTZ3VXBYZXE1anlqUW9ja3VzK3RuWU1PcDIrVnFTMG9ZVWVxRTQrZnpkaUt2bEZvT2ZuV0cwdk9NU01ma1ROZ0RNZXRTRXRNS3hoU05mdURIekQ5c2VOTm8reGd3bnYiLCJtYWMiOiIyMWExYzQ0ZGNmMjI5ZGE1MTcyZTc1ZDY0Mzc1M2Y4ODQ2NzIyZTE5OGRkNmY2N2EyZWZkNjE5Yzg5OWYxOWI1In0%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6IlNhTWwxMmd1a29zMWVcLzRCa0JYT2lBPT0iLCJ2YWx1ZSI6Ilh2WUJoeW9YSHZCWjE3QmcwSmlaWCtqVFRXekkyemdRTGQ4d3dZakZFRmN3R0lvS1gwK3AxcnNSNEU3Q3c0blQ1TWJkQjFtc2lKS3lQcFdIUHpiTnpPMkpweW53U3dZSHVBT1g2b1wvNmZUcWpremo1a0tyUWpQQllzaTFQdXp3diIsIm1hYyI6IjBlODVmYmE5MTQ3MTE5NzVmNDM4NTNkMzQ4YzY1MWE1NzE4MWNmMzY4ZmU3ODUxMWVmNTk4ZTlmNDQ5N2M2NWIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11%20(copy)">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
    <script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
    <script>
        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
    </body>

</html>
Transitions

Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.

# Time Event Element Options
0 1.860287 load page
URL http://b3789e93786d.ngrok.io/admin/permissions
1 1.31688 request http://b3789e93786d.ngrok.io/admin/permissions
2 1.77744 click <a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
3 1.07014 request http://b3789e93786d.ngrok.io/admin/permissions/11

HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11 HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/permissions

Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:48:55 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>
Browser-evaluated body

This is the browser-evaluated body, as a result of the listed transitions.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
<html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->




    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet">
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet">
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet">
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    


</body></html>
HTTP response body

This is the original HTTP response body.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>

System components have attached some insights to this issue.


  • Check
    • Identified by converting the original directory name of '11' to '11 (4th copy)/' using format '[name] (4th copy)/'.
  • Meta analysis
    • This issue was logged by a discovery check but the response for the resource it identified is very similar to responses for other resources of similar type. This is a strong indication that the logged issue is a false positive.
Proof
HTTP/1.1 200 OK
HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11%20(4th%20copy)/ HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:56:31 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6ImlDTE01cDd2dmV3eXRITHZrRVwvOGtnPT0iLCJ2YWx1ZSI6Ilp3c2hjejIyTlZadWlWU0Y2MFBVdVNLUCt2YXViaDNuY3ZSUmdPWjlQcEpJTEdWbVoyVENFXC9zMjI5UUcxeVg2VE4ra29tZEZqZXdLbitmWElISmdaalZJQ0xZXC84TGdiUVNSKzYzdzZxTVUraXR3WkZKblN5S1crUVZYTTE2YksiLCJtYWMiOiI5MjU5YTFhMzVkZDgyZGM0ZTRmMTM5MmE3MTkzNjBiZDkzNTVkZjEzMDljYWNmNjI1Njk1NDEyZDg1MzdlY2NmIn0%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6IitoT0VVY0RJUDNYQ3gxYVRERE9LRWc9PSIsInZhbHVlIjoiVmJXenF1SUVKcWlnaTV1Nzcwcjg2YVpSNTRVQnhQNktCZ0s3eGprcXA5b3VYSkxQS3FSYk01bEZXSHFlTFUxVlloKzkxcTZHUHExMFMwbTkzbTNaYlZ1WHgrUHVBbVlLTnFmcmtMUjRsVDJNdHE5QlAxbnZES3dmQ3RVR1B0aWMiLCJtYWMiOiJlZjFmNGMzY2E4YTZjOGU3OWM4M2I1MzE3MzY2MjU3YzY5MDg4ZGVhMWFlNjRkODYwMTM5YjEwYmYxNzExZDRiIn0%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11%20(copy)">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
    <script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
    <script>
        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
    </body>

</html>
Transitions

Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.

# Time Event Element Options
0 1.860287 load page
URL http://b3789e93786d.ngrok.io/admin/permissions
1 1.31688 request http://b3789e93786d.ngrok.io/admin/permissions
2 1.77744 click <a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
3 1.07014 request http://b3789e93786d.ngrok.io/admin/permissions/11

HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11 HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/permissions

Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:48:55 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>
Browser-evaluated body

This is the browser-evaluated body, as a result of the listed transitions.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
<html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->




    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet">
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet">
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet">
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    


</body></html>
HTTP response body

This is the original HTTP response body.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>

System components have attached some insights to this issue.


  • Check
    • Identified by converting the original directory name of '11' to '11 (3rd copy)/' using format '[name] (3rd copy)/'.
  • Meta analysis
    • This issue was logged by a discovery check but the response for the resource it identified is very similar to responses for other resources of similar type. This is a strong indication that the logged issue is a false positive.
Proof
HTTP/1.1 200 OK
HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11%20(3rd%20copy)/ HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:56:31 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6IkpuZUJLNWNBbkdsVCtEV05uVUE2N0E9PSIsInZhbHVlIjoieUpQTWZsdHdCaGFaNnhMWnJ6eldxZk1VUUNHNnArU3ptTzNFRE1LQlpCU2M0VU9cL2g0bjNwNm12K1B6V2ZCSFR3MG9hUXdaSjNhMVNLRVwvT2Y3NStuT0pqcjJXOGNGZlBnK3BuOWIrempTZHNJZVdvekJJdlwvZWUwUldmQWhJaVciLCJtYWMiOiJiNzYzZjY3Zjk1YTFmZDY3YTQ5YWY4Mjc0MjJjYmQ1YzJiYTIyODdmOWJlZWUzM2QyNDE2NjI2ODk5OGIxOTE1In0%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6IktGRVgyWEpEK2xDTjQ3VFZlT0NKdWc9PSIsInZhbHVlIjoiOWpvSzdEbENTM2VsSGRzb1JUOXBjZUkzR1JvQXdqT0dsUDhsUlIzMTJabkxNVmxsU3FKWVQ5cUVpVjJKNURXUlViV2lVeG1KcTRWRUNlaG5QSzBMR2dENE1GRTlJQ3BJZUZDeDVvVW5KaFpVMDZwWnBRenRQdDY4XC9ndXNHZm56IiwibWFjIjoiNTg2NGQyMjE2OTBiNzA4YmY2YWQ2MzJjNzlkMTk5NWVlY2E4OTE0ZmYzZTRkZGQ0ODFmYjk1YTFiOGU4YzRhZCJ9; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11%20(copy)">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
    <script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
    <script>
        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
    </body>

</html>
Transitions

Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.

# Time Event Element Options
0 1.860287 load page
URL http://b3789e93786d.ngrok.io/admin/permissions
1 1.31688 request http://b3789e93786d.ngrok.io/admin/permissions
2 1.77744 click <a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
3 1.07014 request http://b3789e93786d.ngrok.io/admin/permissions/11

HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11 HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/permissions

Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:48:55 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>
Browser-evaluated body

This is the browser-evaluated body, as a result of the listed transitions.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
<html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->




    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet">
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet">
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet">
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    


</body></html>
HTTP response body

This is the original HTTP response body.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>

System components have attached some insights to this issue.


  • Check
    • Identified by converting the original directory name of '11' to '11 (copy)/' using format '[name] (copy)/'.
  • Meta analysis
    • This issue was logged by a discovery check but the response for the resource it identified is very similar to responses for other resources of similar type. This is a strong indication that the logged issue is a false positive.
Proof
HTTP/1.1 200 OK
HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11%20(copy)/ HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:56:31 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6Ink0ZngyTkhTYU1tdmtOamhERXZFVXc9PSIsInZhbHVlIjoiSklvWGdIU0pKdlVwbWoxYVlmMHduYlNWV3gyNFFVVmoyVnZPUkd0cU5ZMXdnXC95QTN3elwvbEFOeFpxUjFyY0tsWnNadHRnYjZYVFwvemNjN2tMemtONE9MVW8zUXpDR05tck83alhNdER5QTNrUm9LWUd6ZUdRSnlOazZUc0RRQngiLCJtYWMiOiI0MmM0ZTc4NWMzM2YwNWRlMjMzNTI0Y2FiZjFkOWFjYzllZDVmZWVkMzk4M2JkZjNjMmNlNTYyZWFjYWYzMDczIn0%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6IkpVTkpOM3JUejl4T0U4VE1weTVEeUE9PSIsInZhbHVlIjoiUitDMDh4SWZPT2Z5MzFtWDBuWVdCK3VrcGhjZ2xjcU1mbkpxc2dMU0t5SHpGSFllWE44MFRQdkYzeGtPVVwvcnFzT1BSWExxV01QXC82THczak1CM0YzbytqTFlNR3ZaaWR4SDhNN2Z1b3lPOUpsVGlsY3FNUmJJY2FkR1Yrb1EzWCIsIm1hYyI6ImE4OGQxYmI5Yjc1MjllOWUyM2Y1Yzc5ODJkODRmN2E2ODYwMjkwYzY3NDcxY2I2MmZmMzNhMzRmZjVhZDMwZTYifQ%3D%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11/edit">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
    <script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
    <script>
        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
    </body>

</html>
Transitions

Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.

# Time Event Element Options
0 1.860287 load page
URL http://b3789e93786d.ngrok.io/admin/permissions
1 1.31688 request http://b3789e93786d.ngrok.io/admin/permissions
2 1.77744 click <a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
3 1.07014 request http://b3789e93786d.ngrok.io/admin/permissions/11

HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11 HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/permissions

Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:48:55 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>
Browser-evaluated body

This is the browser-evaluated body, as a result of the listed transitions.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
<html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->




    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet">
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet">
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet">
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    


</body></html>
HTTP response body

This is the original HTTP response body.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>

System components have attached some insights to this issue.


  • Check
    • Identified by converting the original directory name of '11' to '11 - Copy/' using format '[name] - Copy/'.
  • Meta analysis
    • This issue was logged by a discovery check but the response for the resource it identified is very similar to responses for other resources of similar type. This is a strong indication that the logged issue is a false positive.
Proof
HTTP/1.1 200 OK
HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11%20-%20Copy/ HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:56:31 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6ImhGWmxKRDFTTG5IWjdSQ2FTOEhBbXc9PSIsInZhbHVlIjoiWGtcL2daMFQ4dFZpVjJWQXJydTdieGVBaHpiK2RcLzhFSTM5VUtBNVV5Z2FESUtPT1h2N2RCTENDZWErbFBERnppMEVVZ0ZyOXBMdk9hTVFaVHFUZG5aV0NoemJnXC9sQmFSQUx6SnFXcG0yM3BjeXBNcU9KM2YrdGxcL2pkZTR3N1RmIiwibWFjIjoiODNjYzE2ZmFlYmU1MWQxNTVlM2YyMjE3ZGIzMmMxNjM5N2Q3OWIzYWM1YjFkOTE0NDQ0MTE4ODA4MTlhYzQxZiJ9; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6IllLS21PeHo1MDh6WTV5TndZclJKY2c9PSIsInZhbHVlIjoiOFNEUUNFM1wvVFp2aEZ6R0x5cWQxNGs1ZFVPRFk0NVFHQjIxUW56U2c0Z3VyYjR2OVlCMkw3Z3d6d3A3OXdQV2x5bVlJV1hTWSt1TGIrNnNUOWl0Zk5vbVlPZ2JuM2ZLTVZsVU1BQWpHUUY2d1I3N3FBSFgxRjcwa2FvcDJxT01KIiwibWFjIjoiMGI4OGE5ZWNkMzQ3MDk2MjRjZDA3ZDY0MDAxMjk3Y2IyZWYzNmNlNzc0NjZjNzNhNzY1MWZkMTc2NmFiOGU0ZCJ9; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11~">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
    <script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
    <script>
        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
    </body>

</html>
Transitions

Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.

# Time Event Element Options
0 1.860287 load page
URL http://b3789e93786d.ngrok.io/admin/permissions
1 1.31688 request http://b3789e93786d.ngrok.io/admin/permissions
2 1.77744 click <a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
3 1.07014 request http://b3789e93786d.ngrok.io/admin/permissions/11

HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11 HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/permissions

Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:48:55 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>
Browser-evaluated body

This is the browser-evaluated body, as a result of the listed transitions.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
<html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->




    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet">
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet">
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet">
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    


</body></html>
HTTP response body

This is the original HTTP response body.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>

System components have attached some insights to this issue.


  • Check
    • Identified by converting the original directory name of '11' to '11 - Copy Copy/' using format '[name] - Copy Copy/'.
  • Meta analysis
    • This issue was logged by a discovery check but the response for the resource it identified is very similar to responses for other resources of similar type. This is a strong indication that the logged issue is a false positive.
Proof
HTTP/1.1 200 OK
HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11%20-%20Copy%20Copy/ HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:56:32 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjZpNGlPcWRXbExwWWNxeVhFMm16NWc9PSIsInZhbHVlIjoiNTM1ZmVPNW03Tmg4Y0o5bCtrcXB0V1A3SVpxR042b1VBNm9WMjRDajhzOEJCTHRFaXI4dUp6VjN3NTEyVFwvdktOYkFicTYzbGhDMXVEeDVzVU5FUUtNZGlZc0dMQXVzSFNZeW9HeEhTWnBLV1dOSHVudHBZbkpXXC84UzJpSnB4RyIsIm1hYyI6IjA4NzU2YjM1ZTkzNjlkMTc0ZjIxMDdmYzg4YTEwMDJiYTFjNjQxYmIwNDdjZWI0ZWExYWQ2NmQ3NTBmZDJlOGEifQ%3D%3D; expires=Mon, 02-Nov-2020 14:56:32 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6Ilg3MUd0U0NOOTcxVmJ6bVdHU1BDbWc9PSIsInZhbHVlIjoiaXlOeUFMZzh0VGRTTXkxZDlOZlBCYXFpODV2RUV0a3NOZTNndmxVOG9UMFwvVnFYWGl2Tm1iODAyV2ZIWVV0RzZHNUpSSG1oeW9UV1lHbVltZEF6ZktzM2hmclwva0FZSmNCWGdQb0wwM09qOFN0QnI2VTVvM1p3YlBtd2hXenkxRyIsIm1hYyI6IjZmNzM3MmUxYTYwZjQ1ZDE4ZjMwMWE0NjA0MjA4ZWNmMTJlNzdjZjM2NmUyOWM1Y2ZhZjAyYjhlNzM1NDk0MmUifQ%3D%3D; expires=Mon, 02-Nov-2020 14:56:32 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/Copy%20of%20Copy%20of%2011">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
    <script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
    <script>
        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
    </body>

</html>
Transitions

Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.

# Time Event Element Options
0 1.860287 load page
URL http://b3789e93786d.ngrok.io/admin/permissions
1 1.31688 request http://b3789e93786d.ngrok.io/admin/permissions
2 1.77744 click <a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
3 1.07014 request http://b3789e93786d.ngrok.io/admin/permissions/11

HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11 HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/permissions

Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:48:55 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>
Browser-evaluated body

This is the browser-evaluated body, as a result of the listed transitions.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
<html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->




    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet">
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet">
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet">
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    


</body></html>
HTTP response body

This is the original HTTP response body.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>

System components have attached some insights to this issue.


  • Check
    • Identified by converting the original directory name of '11' to '11.cbz' using format '[name].cbz'.
  • Meta analysis
    • This issue was logged by a discovery check but the response for the resource it identified is very similar to responses for other resources of similar type. This is a strong indication that the logged issue is a false positive.
Proof
HTTP/1.1 200 OK
HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11.cbz HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:56:31 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6ImZZWDFRYk5PS3dFRGE3dTJHYmx5d3c9PSIsInZhbHVlIjoiQTk4Qkc3NkIrREFuY0hFZTFqWXloN2U5SXltWXROYlZHZXFKdkhQRFYwOW84eDZTeDE3Wmd2dzdUcWlcL2tJMXVCQjR1XC9VTUtuTjRmcStaVFNoSHZVSTZ0cjljXC9rRUtaakpxVlFjT3Y5S3lYc1pDVlZhUnFJeVNlcTdDUWxUTXUiLCJtYWMiOiI2MWY3ZTJiOWEzNDJmMGQxMTY3ZTBlYjE5NzE4OWU2OGExZTBhYTg1NmI0NGU2ZjQ4ZDg3NDNjODFkNjBlZjA0In0%3D; expires=Mon, 02-Nov-2020 14:56:32 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6Iit1N3R1Z3F5RVJyXC9cL1NmYXU1eXc4QT09IiwidmFsdWUiOiJaVWlqaHZhWVB2YUVkQjB0MzBocVNFbmM2bzJ0NHE2Q1o2Ykc3MlA1OEpoamhKMFNpb3ZtWXREMUY2TktMQnJCNWZ6a0liUzkyeEdLaEhHYnhUTXZvV01jR0Rza1F2VENpOUc1TkROdFNEVTI5clZwZ1JFUGdlSVlGTVlaR09XUiIsIm1hYyI6IjE4ODJjNjE5OWEzODM0MDczOTU1MzQ4ZmI5YzU2MDk2ZTNlYzYwZDRiNzA4NDk1ZDc0YzMzZjNjYmI0N2Y1N2YifQ%3D%3D; expires=Mon, 02-Nov-2020 14:56:32 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/Copy%20of%20Copy%20of%2011">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
    <script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
    <script>
        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
    </body>

</html>
Transitions

Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.

# Time Event Element Options
0 1.860287 load page
URL http://b3789e93786d.ngrok.io/admin/permissions
1 1.31688 request http://b3789e93786d.ngrok.io/admin/permissions
2 1.77744 click <a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
3 1.07014 request http://b3789e93786d.ngrok.io/admin/permissions/11

HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11 HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/permissions

Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:48:55 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>
Browser-evaluated body

This is the browser-evaluated body, as a result of the listed transitions.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
<html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->




    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet">
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet">
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet">
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    


</body></html>
HTTP response body

This is the original HTTP response body.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>

System components have attached some insights to this issue.


  • Check
    • Identified by converting the original directory name of '11' to '11 - Copy (2)/' using format '[name] - Copy (2)/'.
  • Meta analysis
    • This issue was logged by a discovery check but the response for the resource it identified is very similar to responses for other resources of similar type. This is a strong indication that the logged issue is a false positive.
Proof
HTTP/1.1 200 OK
HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11%20-%20Copy%20(2)/ HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:56:31 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6Ik1WZUE3WXdxUlwvajJpZm1YSGc4MHpBPT0iLCJ2YWx1ZSI6IjRjd3doakRvVVBQYmxwMFJmXC9VcUR2VXVmQ1FWNkVwVFJOb0FzYzJ5d3hcL2ROd216ZnJGek1telpHWXN6XC9lM25hQTY1M3BCdTVpVnhPRmtHQlU1Q3FBYmF4VjZxQTBIMU1YRDJ0OVhMTmFkNVhia0NnZGVzRWhEZ1ZDZzJrb2pEIiwibWFjIjoiMTUyZDRhZTc4M2FiZDJhMTBiZWU1YzdiMWU1N2YxYjE1ZWU0NmU1NDBkZmEzOWIzMzBiMjViYjE4NmY3YzNhZiJ9; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6IlVIYlhQdXVPUFBPaDJXZE9YdTk2a2c9PSIsInZhbHVlIjoicllRWDROdG1rSE0zNDU1UDVndFV2YTloXC9rMnM1TXhpVGpkb2xvRkQrVU1BMWsxRmM5dmNielwvQVJFNXJXZW1BYTNNUlgwSWhWZ1U0VWpEdHJDVGF5ekltcVZTVVQ2d0hxdGdKSTZldmNUcExDNWwzTGYzYzZjMU5sYjVFWEFKSiIsIm1hYyI6ImUxNmY5MjNkOTVjYzA3NjlkMDE5ZGQzZTNkM2JhZTg0ZTY4ZDVjNGM5NWFmZGE0ZjY0MGU0ODY2MjAwOTlmODMifQ%3D%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11~">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
    <script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
    <script>
        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
    </body>

</html>
Transitions

Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.

# Time Event Element Options
0 1.860287 load page
URL http://b3789e93786d.ngrok.io/admin/permissions
1 1.31688 request http://b3789e93786d.ngrok.io/admin/permissions
2 1.77744 click <a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
3 1.07014 request http://b3789e93786d.ngrok.io/admin/permissions/11

HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11 HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/permissions

Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:48:55 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>
Browser-evaluated body

This is the browser-evaluated body, as a result of the listed transitions.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
<html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->




    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet">
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet">
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet">
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    


</body></html>
HTTP response body

This is the original HTTP response body.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>

System components have attached some insights to this issue.


  • Check
    • Identified by converting the original directory name of '11' to '11~/' using format '[name]~/'.
  • Meta analysis
    • This issue was logged by a discovery check but the response for the resource it identified is very similar to responses for other resources of similar type. This is a strong indication that the logged issue is a false positive.
Proof
HTTP/1.1 200 OK
HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11~/ HTTP/1.1

Host: b3789e93786d.ngrok.io

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.8,he;q=0.6

X-Arachni-Scan-Seed: dc1fd3348d199f5e66655a1b9ebcc24e

Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D;laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:56:31 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6IjhBVnJMM3V4MnV6YmNOSGMzeUVJcHc9PSIsInZhbHVlIjoia1lcL3JEdGRJVFo0eHB4QVVzRkRjdkNOS0U4V0E2eFRPeDVVVVh5MGtrVXRVWVlpM05Ya1pjTEl3UEd0a3BzcFhsVjAwR0dyU0xZTDFGY0xxTEZyXC9jUkZKN0xaNGdhdyt1MUt2dmpzVEdiM2p1TDZZXC94K3RDb0J3XC9UeVhjT2RQIiwibWFjIjoiODM1Y2NmZmZjNGY1ZDkwZjA4NWZkOTZjNmNjODhhYmZmZWYxZDVhMmQ3ZDE2MGUxMmRlMTczMzIxYjNlODU1OSJ9; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6Imxuc000S0VYRGx3K0oxb0VFdjdjcUE9PSIsInZhbHVlIjoiSXJibkhUcUZZRWVjVmdHcWY3TTM4TEN1TzkxZm5QK2FyVjVOWSt6NUQyU0hBXC9UYmFpMzNpOXRUUmZ2TmhcL1p0Q3pmTEoyazBYVEMwU3ZzTlZLclI3TUtYOFQ5UUlFRzVhQ2FnNUdZMllaSDdtdW5KcjBGZVwvdjUybTFaNnNHSjAiLCJtYWMiOiJlZjI3YzBkOGQzNTI2Nzg4M2ZiMzFiNzI3YTQ0MDdmNmRmYmU1YTk4ZTc4MmExMTc1ZjY4NGM1YjI4OWVmN2YxIn0%3D; expires=Mon, 02-Nov-2020 14:56:31 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions/11%20(third%20copy)">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"></script>
    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js"></script>
    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js"></script>
    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js"></script>
    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js"></script>
    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js"></script>
    <script src="http://b3789e93786d.ngrok.io/js/main.js"></script>
    <script>
        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
    </body>

</html>
Transitions

Transitions describe the steps required to restore the state of the page, to the one it had when it was processed by the scanner, as a series of events. In essence, each transition represents a user interaction.

# Time Event Element Options
0 1.860287 load page
URL http://b3789e93786d.ngrok.io/admin/permissions
1 1.31688 request http://b3789e93786d.ngrok.io/admin/permissions
2 1.77744 click <a class="btn btn-xs btn-primary" href="http://b3789e93786d.ngrok.io/admin/permissions/11">
3 1.07014 request http://b3789e93786d.ngrok.io/admin/permissions/11

HTTP request

Raw HTTP request used to retrieve the page.

GET /admin/permissions/11 HTTP/1.1

Accept-Encoding: gzip, deflate

User-Agent: Arachni/v2.0dev

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Referer: http://b3789e93786d.ngrok.io/admin/permissions

Cookie: XSRF-TOKEN=eyJpdiI6IitiaU03VENMNzRtQzZJTGtZTVBPdWc9PSIsInZhbHVlIjoiZGIzQmxpWXh5emdHbjlXeFo2YUc2bmcrT05lWDkyVTFSNFwvRit0R2tFbHhcL2ZFbFA0TzJ5RnJkelU1cFBJdiszSWJuQms3b1c5VmFNamwwcTZ6cExYUFA0ZW44RlJmMEhUTG1lU2ZcL0wyMzJaUmdqRXAwZllqT0dVQXYzUDFwbVkiLCJtYWMiOiJjMjRmOWY0ZmQ2MDZjYWVjMThhMjkyYTc3ZjA2ZGFjY2JkNzJhYjI1MGMyNWU0Y2RjYTA1NDY3N2YxMzE1OGFlIn0%3D;laravel_session=eyJpdiI6InIzaDVzcGVKSkNzTXVwQmhGWStaMmc9PSIsInZhbHVlIjoibllOV3gydHhvTXRpY3JxYmFCS1R3cVUwXC92ZGpaamVjZTJ6N0xzdXJKclQrY3V5QlJ5RGoySzJJcWtpS21jSHY5cjFVVktzV2YyRW1tVWVMQ2pENWdDQXJ1TVdhM0dCSkgrbFZETEVvYWtHNnA0Y1dNamVObHdLa1B1NXlwbnhRIiwibWFjIjoiZjI4M2U5MGZmNjIzYjAyMzUzY2YxNTI0NTRhY2Y4OGJjOGQwNTBmNDJlYWQxZjhhMWFmZmEwZmRlZWM2ZWY2OCJ9

Accept-Language: en-US,*

Host: b3789e93786d.ngrok.io



HTTP response

Raw HTTP response used as the page basis. (Binary bodies will not be displayed.)

HTTP/1.1 200 OK

Server: nginx/1.15.8

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Cache-Control: no-cache, private

Date: Mon, 02 Nov 2020 12:48:55 GMT

Set-Cookie: XSRF-TOKEN=eyJpdiI6InNDeHpaZzBBWVRxOFwvNlYwR0Z3VGh3PT0iLCJ2YWx1ZSI6IlBmNStwd1Z2T05KXC80YWVDaWhEMUExVnhvXC9OM21ZRFIzVVdMK3Y0OGZJTmFIOHl2dnlUQW1Pajl4QVRRb1VydUROekVrNXgzZis5T3FwbHhEUERVS2t0Z3VQN2RFVzM0OWxlb3hZdFNVNGVVYm1FR3l6eU5laEZwbWtqYWRuQk0iLCJtYWMiOiI1YmUzMTkzYTE1ZTI1ZTE0NjM0OGEzZjFhYmNkY2E5ODJlMmY0MWFiMTcxMWE1Y2JmYjEyOGM2MjNlMzc0ZmUwIn0%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/

Set-Cookie: laravel_session=eyJpdiI6InJKRnFSUW1MVHdaRUFabSttMkk0MUE9PSIsInZhbHVlIjoiS2t0RDNRMXA4c2hncGlCWXZCbVpPK25DNmMrWnBjNVdCTFpKWEhDckFhRmVSSkY0VFdub2cwTFwvdW1kZUYrSWl6NjNud3NFeW81OFNcLzd3czBiSU9oNUFhUXl1RDhYK0ZVUStvMFVQcE1XVytsa2Uzbk5KR1BDeEtpN3dHNW13VCIsIm1hYyI6IjQxNDZjOWEyMmNjNzBhOWQzNDRhNzUzM2Q1M2MyODIxNmFhNzM1YzhlMDUwMDlhNWExY2Y5YTgwODZiYzMxMmIifQ%3D%3D; expires=Mon, 02-Nov-2020 14:48:55 GMT; Max-Age=7200; path=/; httponly

Content-Encoding: gzip



<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>
Browser-evaluated body

This is the browser-evaluated body, as a result of the listed transitions.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
<html><head><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->




    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet">
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet">
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet">
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet">
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link" data-arachni-id="209607824">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active" data-arachni-id="1555521058">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link " data-arachni-id="-1170485759">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link " data-arachni-id="-832018167">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link " data-arachni-id="-932905896">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link " data-arachni-id="-692569287">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link " data-arachni-id="-2088011370">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link " data-arachni-id="-57651262">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link " data-arachni-id="-2134217464">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();" data-arachni-id="273839128">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    


</body></html>
HTTP response body

This is the original HTTP response body.

0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
<script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="csrf-token" content="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">

    <title>Appointments</title>
    <link href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/jquery.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/1.10.19/css/dataTables.bootstrap4.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/buttons/1.2.4/css/buttons.dataTables.min.css" rel="stylesheet" />
    <link href="https://cdn.datatables.net/select/1.3.0/css/select.dataTables.min.css" rel="stylesheet" />
    <link href="https://unpkg.com/@coreui/coreui@2.1.16/dist/css/coreui.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/css/select2.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/css/bootstrap-datetimepicker.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.css" rel="stylesheet" />
    <link href="http://b3789e93786d.ngrok.io/css/custom.css" rel="stylesheet" />
    </head>

<body class="app header-fixed sidebar-fixed aside-menu-fixed pace-done sidebar-lg-show">
    <header class="app-header navbar">
        <button class="navbar-toggler sidebar-toggler d-lg-none mr-auto" type="button" data-toggle="sidebar-show">
            <span class="navbar-toggler-icon"></span>
        </button>
        <a class="navbar-brand" href="#">
            <span class="navbar-brand-full">Appointments</span>
            <span class="navbar-brand-minimized">Appointments</span>
        </a>
        <button class="navbar-toggler sidebar-toggler d-md-down-none" type="button" data-toggle="sidebar-lg-show">
            <span class="navbar-toggler-icon"></span>
        </button>

        <ul class="nav navbar-nav ml-auto">
            

        </ul>
    </header>

    <div class="app-body">
        <div class="sidebar">
    <nav class="sidebar-nav">

        <ul class="nav">
            <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin" class="nav-link">
                    <i class="nav-icon fas fa-fw fa-tachometer-alt">

                    </i>
                    Dashboard
                </a>
            </li>
                            <li class="nav-item nav-dropdown">
                    <a class="nav-link  nav-dropdown-toggle" href="#">
                        <i class="fa-fw fas fa-users nav-icon">

                        </i>
                        User management
                    </a>
                    <ul class="nav-dropdown-items">
                                                    <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/permissions" class="nav-link active">
                                    <i class="fa-fw fas fa-unlock-alt nav-icon">

                                    </i>
                                    Permissions
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/roles" class="nav-link ">
                                    <i class="fa-fw fas fa-briefcase nav-icon">

                                    </i>
                                    Roles
                                </a>
                            </li>
                                                                            <li class="nav-item">
                                <a href="http://b3789e93786d.ngrok.io/admin/users" class="nav-link ">
                                    <i class="fa-fw fas fa-user nav-icon">

                                    </i>
                                    Users
                                </a>
                            </li>
                                            </ul>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/services" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Services
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/employees" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Employees
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/clients" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Clients
                    </a>
                </li>
                                        <li class="nav-item">
                    <a href="http://b3789e93786d.ngrok.io/admin/appointments" class="nav-link ">
                        <i class="fa-fw fas fa-cogs nav-icon">

                        </i>
                        Appointments
                    </a>
                </li>
                        <li class="nav-item">
                <a href="http://b3789e93786d.ngrok.io/admin/system-calendar" class="nav-link ">
                    <i class="nav-icon fa-fw fas fa-calendar">

                    </i>
                    Calendar
                </a>
            </li>
            <li class="nav-item">
                <a href="#" class="nav-link" onclick="event.preventDefault(); document.getElementById('logoutform').submit();">
                    <i class="nav-icon fas fa-fw fa-sign-out-alt">

                    </i>
                    Logout
                </a>
            </li>
        </ul>

    </nav>
    <button class="sidebar-minimizer brand-minimizer" type="button"></button>
</div>        <main class="main">


            <div style="padding-top: 20px" class="container-fluid">
                                                
<div class="card">
    <div class="card-header">
        Show Permissions
    </div>

    <div class="card-body">
        <div class="mb-2">
            <table class="table table-bordered table-striped">
                <tbody>
                    <tr>
                        <th>
                            ID
                        </th>
                        <td>
                            11
                        </td>
                    </tr>
                    <tr>
                        <th>
                            Title
                        </th>
                        <td>
                            role_access
                        </td>
                    </tr>
                </tbody>
            </table>
            <a style="margin-top:20px;" class="btn btn-default" href="http://b3789e93786d.ngrok.io/admin/permissions">
                Back to list
            </a>
        </div>

        <nav class="mb-3">
            <div class="nav nav-tabs">

            </div>
        </nav>
        <div class="tab-content">

        </div>
    </div>
</div>

            </div>


        </main>
        <form id="logoutform" action="http://b3789e93786d.ngrok.io/logout" method="POST" style="display: none;">
            <input type="hidden" name="_token" value="g552kgu9bIUlfaavvUPeTcnXZBfR9eVPnrU8dT3B">
        </form>
    </div>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.1/js/bootstrap.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://unpkg.com/@coreui/coreui@2.1.16/dist/js/coreui.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/dataTables.buttons.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdn.datatables.net/buttons/1.2.4/js/buttons.flash.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.html5.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.print.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/buttons/1.2.4/js/buttons.colVis.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="//cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.datatables.net/select/1.3.0/js/dataTables.select.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdn.ckeditor.com/ckeditor5/11.0.1/classic/ckeditor.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.47/js/bootstrap-datetimepicker.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.5/js/select2.full.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="https://cdnjs.cloudflare.com/ajax/libs/dropzone/5.5.1/min/dropzone.min.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script src="http://b3789e93786d.ngrok.io/js/main.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();


        $(function() {
  let copyButtonTrans = 'Copy'
  let csvButtonTrans = 'CSV'
  let excelButtonTrans = 'Excel'
  let pdfButtonTrans = 'PDF'
  let printButtonTrans = 'Print'
  let colvisButtonTrans = 'Column visibility'

  let languages = {
    'en': 'https://cdn.datatables.net/plug-ins/1.10.19/i18n/English.json'
  };

  $.extend(true, $.fn.dataTable.Buttons.defaults.dom.button, { className: 'btn' })
  $.extend(true, $.fn.dataTable.defaults, {
    language: {
      url: languages['en']
    },
    columnDefs: [{
        orderable: false,
        className: 'select-checkbox',
        targets: 0
    }, {
        orderable: false,
        searchable: false,
        targets: -1
    }],
    select: {
      style:    'multi+shift',
      selector: 'td:first-child'
    },
    order: [],
    scrollX: true,
    pageLength: 100,
    dom: 'lBfrtip<"actions">',
    buttons: [
      {
        extend: 'copy',
        className: 'btn-default',
        text: copyButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'csv',
        className: 'btn-default',
        text: csvButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'excel',
        className: 'btn-default',
        text: excelButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'pdf',
        className: 'btn-default',
        text: pdfButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'print',
        className: 'btn-default',
        text: printButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      },
      {
        extend: 'colvis',
        className: 'btn-default',
        text: colvisButtonTrans,
        exportOptions: {
          columns: ':visible'
        }
      }
    ]
  });

  $.fn.dataTable.ext.classes.sPageButton = '';
});

    </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

    </body>

</html>

Plugin results

It looks for the login form in the user provided URL, merges its input fields with the user supplied parameters and sets the cookies of the response and request as framework-wide cookies.

NOTICE: If the login form is by default hidden and requires a sequence of DOM interactions in order to become visible, this plugin will not be able to submit it.

Logged in successfully.

Cookies set to:

XSRF-TOKEN
eyJpdiI6Im12TG9HMVZJTDlFb2EzOHE0eEpyOFE9PSIsInZhbHVlIjoib05ZY08yTnlmVWdDMW9kbWZYOWVINGsyM2hERU12S3ZINTdXcTg2SnF1TmdicjhOK1UwSThrckN6Z3hyM05vVlB5OERYTXBaWUd5UHV5bENKalh6V2h4dEhWXC9VYTI1M2xNY2JSak95d3h2QjhEcTEzMW9EMXNCa2pucElMb0xrIiwibWFjIjoiZWRmMTRmNDFmNjY1M2JkMzNhMjZjNzc1ZDI3YThlMzA3YTI2NGUxNjlmZjgzMmQ2MDAzM2UzNGYzODgyNmViNSJ9
laravel_session
eyJpdiI6Ik9HRmtKeFB0VzVtRlBoN2xHMGc0a2c9PSIsInZhbHVlIjoiWENsTFBZMWZMZUxWN0VSU3hua09Xb2xlMEtnR3RpUU5qbXdRb2I0RXBiSVBjSzczVnoxcTFrY2szWU1kb3pqNVBKZzlVSHVmTFwvcVBWOHRtaG1nVENPZDNEZ2N6azNUb01DWjNKK0xndGl3Y1FaUFNtTXJNRm93RjdYWG81UTBiIiwibWFjIjoiN2FlZGZiODIyYjk5NjdjMDAzODRmMzlkNjFlODJiZmNhZjZhNDBjMjcxYTM1MTM1NWIzMDkxN2EzN2M2ZDc5MiJ9

Generates a simple list of safe/unsafe URLs.

Total
175
Without issues
151
With issues
24
Issue percentage
14

Sitemap 162

HTTP status code URL
302 http://b3789e93786d.ngrok.io/
404 http://b3789e93786d.ngrok.io/.exec
404 http://b3789e93786d.ngrok.io/.test
404 http://b3789e93786d.ngrok.io/CheckForMaintenanceMode.php
404 http://b3789e93786d.ngrok.io/HTMLUnknownElement/.test
404 http://b3789e93786d.ngrok.io/Kernel.php
404 http://b3789e93786d.ngrok.io/Pipeline.php
404 http://b3789e93786d.ngrok.io/RouteCollection.php
404 http://b3789e93786d.ngrok.io/Router.php
404 http://b3789e93786d.ngrok.io/TransformsRequest.php
404 http://b3789e93786d.ngrok.io/TrustProxies.php
404 http://b3789e93786d.ngrok.io/ValidatePostSize.php
200 http://b3789e93786d.ngrok.io/admin
200 http://b3789e93786d.ngrok.io/admin/appointments
200 http://b3789e93786d.ngrok.io/admin/appointments/1
200 http://b3789e93786d.ngrok.io/admin/appointments/1/edit
200 http://b3789e93786d.ngrok.io/admin/appointments/10
200 http://b3789e93786d.ngrok.io/admin/appointments/10/edit
200 http://b3789e93786d.ngrok.io/admin/appointments/2
200 http://b3789e93786d.ngrok.io/admin/appointments/2/edit
200 http://b3789e93786d.ngrok.io/admin/appointments/3
200 http://b3789e93786d.ngrok.io/admin/appointments/3/edit
200 http://b3789e93786d.ngrok.io/admin/appointments/4
200 http://b3789e93786d.ngrok.io/admin/appointments/4/edit
200 http://b3789e93786d.ngrok.io/admin/appointments/5
200 http://b3789e93786d.ngrok.io/admin/appointments/5/edit
404 http://b3789e93786d.ngrok.io/admin/appointments/55
200 http://b3789e93786d.ngrok.io/admin/appointments/6
200 http://b3789e93786d.ngrok.io/admin/appointments/6/edit
200 http://b3789e93786d.ngrok.io/admin/appointments/7
200 http://b3789e93786d.ngrok.io/admin/appointments/7/edit
200 http://b3789e93786d.ngrok.io/admin/appointments/8
404 http://b3789e93786d.ngrok.io/admin/appointments/8.1
200 http://b3789e93786d.ngrok.io/admin/appointments/8/edit
404 http://b3789e93786d.ngrok.io/admin/appointments/82
200 http://b3789e93786d.ngrok.io/admin/appointments/9
200 http://b3789e93786d.ngrok.io/admin/appointments/9/edit
200 http://b3789e93786d.ngrok.io/admin/appointments/create
404 http://b3789e93786d.ngrok.io/admin/appointments/destroy
200 http://b3789e93786d.ngrok.io/admin/clients
200 http://b3789e93786d.ngrok.io/admin/clients/create
404 http://b3789e93786d.ngrok.io/admin/clients/destroy
200 http://b3789e93786d.ngrok.io/admin/employees
200 http://b3789e93786d.ngrok.io/admin/employees/create
404 http://b3789e93786d.ngrok.io/admin/employees/destroy
404 http://b3789e93786d.ngrok.io/admin/employees/media
200 http://b3789e93786d.ngrok.io/admin/permissions
200 http://b3789e93786d.ngrok.io/admin/permissions/1
200 http://b3789e93786d.ngrok.io/admin/permissions/1/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/10
200 http://b3789e93786d.ngrok.io/admin/permissions/10/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/11
200 http://b3789e93786d.ngrok.io/admin/permissions/11/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/12
200 http://b3789e93786d.ngrok.io/admin/permissions/12/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/13
200 http://b3789e93786d.ngrok.io/admin/permissions/13/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/14
200 http://b3789e93786d.ngrok.io/admin/permissions/14/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/15
200 http://b3789e93786d.ngrok.io/admin/permissions/15/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/16
200 http://b3789e93786d.ngrok.io/admin/permissions/16/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/17
200 http://b3789e93786d.ngrok.io/admin/permissions/17/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/18
200 http://b3789e93786d.ngrok.io/admin/permissions/18/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/19
200 http://b3789e93786d.ngrok.io/admin/permissions/19/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/2
200 http://b3789e93786d.ngrok.io/admin/permissions/2#
200 http://b3789e93786d.ngrok.io/admin/permissions/2/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/20
200 http://b3789e93786d.ngrok.io/admin/permissions/20/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/21
200 http://b3789e93786d.ngrok.io/admin/permissions/21/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/22
200 http://b3789e93786d.ngrok.io/admin/permissions/22/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/23
200 http://b3789e93786d.ngrok.io/admin/permissions/23#
200 http://b3789e93786d.ngrok.io/admin/permissions/23/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/24
200 http://b3789e93786d.ngrok.io/admin/permissions/24/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/25
200 http://b3789e93786d.ngrok.io/admin/permissions/25/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/26
200 http://b3789e93786d.ngrok.io/admin/permissions/26/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/27
200 http://b3789e93786d.ngrok.io/admin/permissions/27/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/28
200 http://b3789e93786d.ngrok.io/admin/permissions/28/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/29
200 http://b3789e93786d.ngrok.io/admin/permissions/29/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/3
200 http://b3789e93786d.ngrok.io/admin/permissions/3/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/30
200 http://b3789e93786d.ngrok.io/admin/permissions/30/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/31
200 http://b3789e93786d.ngrok.io/admin/permissions/31/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/32
200 http://b3789e93786d.ngrok.io/admin/permissions/32/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/33
200 http://b3789e93786d.ngrok.io/admin/permissions/33/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/34
200 http://b3789e93786d.ngrok.io/admin/permissions/34/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/35
200 http://b3789e93786d.ngrok.io/admin/permissions/35/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/36
200 http://b3789e93786d.ngrok.io/admin/permissions/36/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/4
200 http://b3789e93786d.ngrok.io/admin/permissions/4/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/5
200 http://b3789e93786d.ngrok.io/admin/permissions/5/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/6
200 http://b3789e93786d.ngrok.io/admin/permissions/6/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/7
200 http://b3789e93786d.ngrok.io/admin/permissions/7/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/8
200 http://b3789e93786d.ngrok.io/admin/permissions/8/edit
200 http://b3789e93786d.ngrok.io/admin/permissions/9
200 http://b3789e93786d.ngrok.io/admin/permissions/9/edit
404 http://b3789e93786d.ngrok.io/admin/permissions/9776%20(copy)
200 http://b3789e93786d.ngrok.io/admin/permissions/create
404 http://b3789e93786d.ngrok.io/admin/permissions/destroy
200 http://b3789e93786d.ngrok.io/admin/roles
200 http://b3789e93786d.ngrok.io/admin/roles/1
200 http://b3789e93786d.ngrok.io/admin/roles/1/edit
200 http://b3789e93786d.ngrok.io/admin/roles/2
200 http://b3789e93786d.ngrok.io/admin/roles/2/edit
200 http://b3789e93786d.ngrok.io/admin/roles/create
404 http://b3789e93786d.ngrok.io/admin/roles/destroy
200 http://b3789e93786d.ngrok.io/admin/services
200 http://b3789e93786d.ngrok.io/admin/services/create
404 http://b3789e93786d.ngrok.io/admin/services/destroy
200 http://b3789e93786d.ngrok.io/admin/system-calendar
200 http://b3789e93786d.ngrok.io/admin/users
200 http://b3789e93786d.ngrok.io/admin/users/1
200 http://b3789e93786d.ngrok.io/admin/users/1/edit
200 http://b3789e93786d.ngrok.io/admin/users/create
404 http://b3789e93786d.ngrok.io/admin/users/destroy
404 http://b3789e93786d.ngrok.io/app.php
404 http://b3789e93786d.ngrok.io/b3789e93786d.ngrok.io
200 http://b3789e93786d.ngrok.io/css/custom.css
404 http://b3789e93786d.ngrok.io/gi.source
302 http://b3789e93786d.ngrok.io/home
404 http://b3789e93786d.ngrok.io/home/vagrant/ProjectLaravel/public/index.php
404 http://b3789e93786d.ngrok.io/home/vagrant/ProjectLaravel/vendor/fideloper/proxy/src/TrustProxies.php
404 http://b3789e93786d.ngrok.io/home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Kernel.php
404 http://b3789e93786d.ngrok.io/home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/CheckForMaintenanceMode.php
404 http://b3789e93786d.ngrok.io/home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/TransformsRequest.php
404 http://b3789e93786d.ngrok.io/home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Foundation/Http/Middleware/ValidatePostSize.php
404 http://b3789e93786d.ngrok.io/home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php
404 http://b3789e93786d.ngrok.io/home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/RouteCollection.php
404 http://b3789e93786d.ngrok.io/home/vagrant/ProjectLaravel/vendor/laravel/framework/src/Illuminate/Routing/Router.php
404 http://b3789e93786d.ngrok.io/i.test
302 http://b3789e93786d.ngrok.io/index.php
200 http://b3789e93786d.ngrok.io/js/main.js
200 http://b3789e93786d.ngrok.io/login
200 http://b3789e93786d.ngrok.io/logout
302 http://b3789e93786d.ngrok.io/password/reset
404 http://b3789e93786d.ngrok.io/phantomjs/.test
404 http://b3789e93786d.ngrok.io/v2.0dev